3Com 400 Family, Руководство по настройке

Страница: 140 / 344

138 C
HAPTER
8: ACL C
ONFIGURATION
Networking Diagram
Figure 38 Access Control Configuration Example
Configuration Procedure
In the following configurations, only the commands related to ACL configurations
are listed.
1 Define the time range
Define time range from 8:00 to 18:00.
[4500] time-range 3Com 8:00 to 18:00 daily
2 Define the ACL for the packet whose source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
a Enter the numbered link ACL, number as 4000.
[4500]
acl number 4000
b Define the rules for the packet whose source MAC address is 00e0-fc01-0101
and destination MAC address is 00e0-fc01-0303.
[4500-acl-ethernetframe-4000] rule 1 deny source 00e0-fc01-0101
ffff-ffff-ffff 00e0-fc01-0303 ffff-ffff-ffff time-range 3Com
3 Activate ACL.
Activate the ACL 4000 .
[4500-GigabitEthernet1/0/50] packet-filter inbound link-group 4000
QoS Configuration
Traffic
Traffic refers to all packets passing through a Switch.
Traffic Classification
Traffic classification means identifying the packets with certain characteristics,
using the matching rule called classification rule, set by the configuration
administrator based on the actual requirements. The rule can be very simple. For
example, the traffic with different priorities can be identified according to the ToS
field in IP packet header. There are also some complex rules. For example, the
information over the integrated link layer (Layer-2), network layer (Layer-3) and
transport layer (Layer-4), such as MAC address, IP protocol, source IP address,
destination IP address and the port number of application etc can be used for
traffic classification. Generally the classification standards are encapsulated in the
header of the packets. The packet content is seldom used as the classification
standard.
Switch
#1
connect to Router