3com WX3000 Manuel D’Utilisation

Page de 715
 
1-10 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Apply an ACL to a VLAN 
packet-filter vlan vlan-id 
inbound acl-rule 
Required 
For description on the acl-rule 
argument, refer to ACL Command
 
Configuration example 
# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports.  
<device> system-view 
[device] packet-filter vlan 10 inbound ip-group 2000 
Assigning an ACL to a Port Group 
Configuration prerequisites 
Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about 
defining an ACL, refer to 
Configuration procedure 
Follow these steps to assign an ACL to a port group: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Enter port group view 
port-group group-id 
— 
Apply an ACL to the port 
group 
packet-filter inbound acl-rule 
Required 
For description on the acl-rule 
argument, refer to ACL Command
 
 
After an ACL is assigned to a port group, it will be automatically assigned to the ports that are 
subsequently added to the port group.  
 
Configuration example 
# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group.  
<device> system-view 
[device] port-group 1 
[device-port-group-1] packet-filter inbound ip-group 2000