华为S9306 如何进行访问控制配置

如何进行访问控制配置

1. 配置ACL规则

   [Quidway] acl number 3000
   [Quidway -acl-adv-3000] rule 0 permit ip source 192.168.1.1 0

2. 配置分类器

   [Quidway] traffic classifier 3000
   [Quidway -classifier-3000] if-match acl 3000

3. 配置流动作

   [Quidway] traffic behavior 3000
   [Quidway -behavior-3000] deny

4. 配置流策略

   [Quidway] traffic policy 3000
   [Quidway -trafficpolicy-3000] classifier 3000 behavior 3000

5. 端口下发流策略

   [Quidway -GigabitEthernet3/0/0] traffic-policy 3000 inbound