ZXA10 C300 Configuration Manual (CLI)
ZXAN(config)#acl extended number 101
ZXAN(config-ext-acl)#
Note:
The extended ACL number ranges from 100 to 199. An extended ACL can be applied
to an Ethernet interface only.
2.
Configure the ACL rules.
ZXAN(config-ext-acl)#rule 1 deny tcp 192.168.1.0 0.0.0.255 eq telnet any
ZXAN(config-ext-acl)#rule 2 permit tcp any eq telnet any
ZXAN(config-ext-acl)#exit
Note:
Each extended ACL supports up to 1024 rules.
If the time range is not configured, the rule is always effective.
3.
In Ethernet interface configuration mode, apply the ACL.
ZXAN(config)#interface gei_1/21/1
ZXAN(config-if)#ip access-group 101 in
4.
(Optional) Query the ACL configuration.
ZXAN(config-if)#show acl 101
acl extend number 101
rule 1 deny tcp 192.168.1.0 0.0.0.255 eq telnet any
rule 2 permit tcp any eq telnet any
5.
(Optional) Query the interface bound with the ACL.
ZXAN(config-if)#show access-list bound
Interface
Direction Type
Status
Acl number/name
gei_1/21/1
in
V4EXT
successful
101
– End of Steps –
8.3 Configuring a Layer-2 ACL
This section describes how to configure a layer-2 ACL and apply it to an Ethernet interface.
8-4
SJ-20130520164529-007|2013-06-30 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXA10 C300
Страница 8: ...VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 294: ...Tables This page intentionally left blank VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 301: ...Glossary VoIP Voice over Internet Protocol XIII SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...