Ruijie RG-S2900G-E Series, Configuration Manual

Page: 780 / 943

Configuration Guide Access Control List Configuration
Command Function
Ruijie(config)# security access-group
acl-name
Configure a security tunnel on the interface.
If the interface is set as an exception port, remove the setting and then configure the security tunnel
on the interface.
The following example configures a security tunnel.
Set port 4 as security port and bind IP address and MAC address
Ruijie(config)# interface FastEthernet 0/4
Ruijie(config-if)# switchport port-security
Ruijie(config-if)# switchport port-security mac-address 0000.0000.0011 ip-address
192.168.6.3
Only the packets whose source IP address is 192.168.6.3 and MAC address is 0000.0000.0011 can
flow in the switch from port 4. To receive IPX packets, set a security tunnel as follows:
Ruijie# configure
Ruijie(config)# expert access-list extended safe_channel
Ruijie(config-exp-nacl)# permit ipx any any
Ruijie(config-exp-nacl)# exit
Ruijie(config)# security global access-group safe_channel
Or configure a security tunnel on the interface:
Ruijie# configure
Ruijie(config)# expert access-list extended safe_channel
Ruijie(config-exp-nacl)# permit ipx any any
Ruijie(config-exp-nacl)# exit
Ruijie(config)# interface FastEthernet 0/4
Ruijie(config-if)# security access-group safe_channel
Configuring the List Remark
The ACL remark and ACE remark functions are provided for the ACL configuration and display.
Note

Up to one ACL remark and 2048 ACE remarks are configured in one
ACL.

The length of each remark is 100 bytes.
In the privileged configuration mode, execute the following commands to configure the ACL remark: