华为6506下的ACL配置

最新推荐文章于 2024-08-18 23:03:51 发布

zhrmghl

最新推荐文章于 2024-08-18 23:03:51 发布

阅读量1.6k

点赞数

分类专栏：网络技术调试心得文章标签：华为 interface statistics performance basic access

本文链接：https://blog.csdn.net/zhrmghl/article/details/1632101

版权

调试心得同时被 2 个专栏收录

80 篇文章 0 订阅

订阅专栏

网络技术

33 篇文章 0 订阅

订阅专栏

华为6506下加入ACL步骤:
    先进入配置模式.
    <SW6506>sys
      System View: return to User View with Ctrl+Z
    [SW6506]
    建立访问控制列表
[SW6506]acl number 4012
[SW6506-acl-adv-4012]
[SW6506-acl-adv-4012]rule 0 permit icmp source 10.1.43.0 0.0.0.255 destination 10.1.2.11 0
[SW6506-acl-adv-4012]rule 1 deny icmp source 10.1.0.0 0.0.255.255 destination 10.1.2.11 0
    进入接口模式
[SW6506]int g4/0/43
[SW6506-GigabitEthernet4/0/43]qos
This interface's qos performance is limited as following:
The number of rules that can be made active is <= 120/(interface).
The number of traffic statistics that can be made active is <= 32/(interface).
The number of traffic bandwidth limits that can be made active is <= 60/(inter
face).
[SW6506-qosb-GigabitEthernet4/0/43]pack
[SW6506-qosb-GigabitEthernet4/0/43]packet-filter ?
inbound Apply the acl on inbound packets of the interface

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ?
ip-group Apply the basic or advanced acl
link-group Apply the link-based acl
user-group Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-
2XJDZJ-SW-S6506-01-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-group 4012 将ACL应用到接口,再dis cu int g4/0/43进行查看.
[SW6506-qosb-GigabitEthernet4/0/43]dis cu int g4/0/43
#
interface GigabitEthernet4/0/43
port access vlan 143
qos
packet-filter inbound ip-group 4012 rule 0 system-index 1
packet-filter inbound ip-group 4012 rule 1 system-index 2
#
return
[SW6506-qosb-GigabitEthernet4/0/43]

取消接口上的应用
[SW6506-qosb-GigabitEthernet4/0/43]qos
This interface's qos performance is limited as following:
The number of rules that can be made active is <= 120/(interface).
The number of traffic statistics that can be made active is <= 32/(interface).
The number of traffic bandwidth limits that can be made active is <= 60/(inter
face).
[SW6506-qosb-GigabitEthernet4/0/43]undo pack
[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ?
ip-group Apply the basic or advanced acl
link-group Apply the link-based acl
user-group Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ip-group 4012
[SW6506-qosb-GigabitEthernet4/0/43]