Hirschmann GREYHOUND GRS1020, Справочное руководство

Страница: 445 / 619

Controlling the data traffic
8.2 ACL
105
UM Config GRS
Release 8.0 09/2019
8.2.5 Assigning ACLs to a port or VLAN
When you assign ACLs to a port or VLAN, the device gives you the following options:

To select the port or VLAN.

To specify the ACL priority.


To select the ACL using the group name.
Perform the following steps:
mac acl rule add 1 1 deny src any any
dst any any etype appletalk
Adds a rule to position
1
of the MAC ACL with the
ID
1
rejecting packets with EtherType
0x809B
(AppleTalk)
.
mac acl rule add 1 2 deny src any any
dst any any etype ipx-old
Adds a rule to position
2
of the MAC ACL with the
ID
1
rejecting packets with EtherType
0x8137 (IPX
alt)
.
mac acl rule add 1 3 deny src any any
dst any any etype ipx-new
Adds a rule to position
3
of the MAC ACL with the
ID
1
rejecting packets with EtherType
0x8138 (IPX)
.
mac acl rule add 1 4 permit src any any
dst any any
Adds a rule to position
4
of the MAC ACL with the
ID
1
forwarding packets.
show acl mac rules 1
Displays the rules of the MAC ACL with the ID
1
.
interface 1/1,1/2,1/3,1/4,1/5,1/6
Change to the interface configuration mode of the
interfaces
1/1
to
1/6
.
acl mac assign 1 in 1
Assigns the MAC ACL with the ID
1
to incoming
data packets (
1/1
) on interfaces
1/6
to
in
.
exit
Leaves the interface mode.
show acl mac assignment 1
Displays the assignment of the MAC ACL with the
ID
1
to interfaces or VLANs.

Open the Network Security > ACL > Assignment dialog.

Click the button.
The dialog displays the Create window.

In the Port/VLAN field, specify the desired port or the desired VLAN.

In the Priority field, specify the priority.

In the Direction field, specify the data packets to which the device applies the rule.

In the Group name field, specify the rule the device assigns to the port or the VLAN.

Click the Ok button.

To save the changes temporarily, click the button.