华为6506下的ACL配置

华为6506下加入ACL步骤:
    先进入配置模式.
    <SW6506>sys
      System View: return to User View with Ctrl+Z
    [SW6506]
    建立访问控制列表
[SW6506]acl number 4012
[SW6506-acl-adv-4012]
 [SW6506-acl-adv-4012]rule 0 permit icmp source 10.1.43.0 0.0.0.255 destination 10.1.2.11 0
 [SW6506-acl-adv-4012]rule 1 deny icmp source 10.1.0.0 0.0.255.255 destination 10.1.2.11 0
    进入接口模式
[SW6506]int g4/0/43
[SW6506-GigabitEthernet4/0/43]qos
 This interface's qos performance is limited as following:
   The number of rules that can be made active is <= 120/(interface).
   The number of traffic statistics that can be made active is <= 32/(interface).
   The number of traffic bandwidth limits that can be made active is <= 60/(inter
face).
[SW6506-qosb-GigabitEthernet4/0/43]pack
[SW6506-qosb-GigabitEthernet4/0/43]packet-filter ?
   inbound  Apply the acl on inbound packets of the interface

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ?
   ip-group    Apply the basic or advanced acl
   link-group  Apply the link-based acl
   user-group  Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-
 2XJDZJ-SW-S6506-01-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-group 4012    将ACL应用到接口,再dis cu int g4/0/43进行查看.
[SW6506-qosb-GigabitEthernet4/0/43]dis cu int g4/0/43
#
interface GigabitEthernet4/0/43
 port access vlan 143
 qos
 packet-filter inbound ip-group 4012 rule 0 system-index 1
 packet-filter inbound ip-group 4012 rule 1 system-index 2
#
return
[SW6506-qosb-GigabitEthernet4/0/43]

    取消接口上的应用
[SW6506-qosb-GigabitEthernet4/0/43]qos
This interface's qos performance is limited as following:
  The number of rules that can be made active is <= 120/(interface).
  The number of traffic statistics that can be made active is <= 32/(interface).
  The number of traffic bandwidth limits that can be made active is <= 60/(inter
face).
[SW6506-qosb-GigabitEthernet4/0/43]undo pack
[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ?
  ip-group    Apply the basic or advanced acl
  link-group  Apply the link-based acl
  user-group  Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ip-group 4012
[SW6506-qosb-GigabitEthernet4/0/43]