Huawei 3300 vswitch ACL 2

 

Condition:Allow the 1.1.1.1 and 3.3.3.3 CIDR blocks of the Internet to access the 2.2.2.2 CIDR blocks under the vswitch. prohibit all other CIDR blocks from accessing the downstream server.

 

Acl number 3000 (define to allow external CIDR blocks to access the following CIDR blocks)

Rule permit ip sourse 1.1.1.1 0.0.255 dest 2.2.2.2 0.0.0.255

Rule permit ip sourse3.3.3.3 0.0.255 dest 2.2.2.2 0.0.0.255

 

 

Acl number 3001

Rule permit ip

 

Traffic class yunxu (name, can be defined at Will)

If-match acl 3000:

 

Traffic beha yunxu

Filter permit (or directly permit)

 

Traffic class jinzhi (name, which can be defined at Will)

If-match acl 3001:

 

Traffic beha jinzhi

Filter deny (or directly deny)

 

 

Traffic policy xianzhi

Class yunxu beha yunxu

 

Class xianzhi beha xianzhi

 

Finally, go to the uplink physical port

 

Interface ethe 0/0/1

Traffic-policy xianzhi inbound

 

This article is from the "ksk" blog, please be sure to keep this source http://86612.blog.51cto.com/76612/1060465