3Com 5500-EI Series, Справочное руководство

Страница: 749 / 1314

1-10
# Apply rule 1 of Layer 2 ACL 4000 on all ports in VLAN 20 to filter outbound packets. Here, it is
assumed that the ACL and its rule numbered 1 and the VLAN are already configured.
[Sysname] packet-filter vlan 20 outbound link-group 4000 rule 1
# Apply rule 2 of user-defined ACL 5000 on all ports in VLAN 30 to filter inbound packets. Here, it is
assumed that the ACL and its rule numbered 2 and the VLAN are already configured.
[Sysname] packet-filter vlan 30 inbound user-group 5000 rule 2
# Apply rule 1 of advanced ACL 3000 and rule 2 of Layer 2 ACL 4000 on all ports in VLAN 40 to filter
inbound packets. Here, it is assumed that the ACLs and their rules and the VLAN are already
configured.
[Sysname] packet-filter vlan 40 inbound ip-group 3000 rule 1 link-group 4000 rule 2
After completing the above configuration, you can use the display packet-filter command to view
information about packet filtering.
rule (for Basic ACLs)
Syntax
rule [ rule-id ] { deny | permit } [ rule-string ]
undo rule rule-id [ fragment | source | time-range ]*
View
Basic ACL view
Parameters
Parameters of the rule command
rule-id : ACL rule ID, in the range of 0 to 65534.
deny : Drops the matched packets.
permit : Permits the matched packets.
rule-string : ACL rule information, which can be a combination of the parameters described in Table 1-6 .