156CHAPTER 7: QOS/ OPERATION

Define the work time range:

1Set the time range 8:00 to 18:00.

[SW7750] time-range 3com 8:00 to 18:00 working day

Define the ACL to access the payment server:

1Enter the name of the advanced ACL, named traffic-of-payserver.

[SW7750]acl name traffic-of-payserver advanced match-order config

2Set the rules for other department to access the payment server.

[SW7750-acl-adv-traffic-of-payserver]rule 1 deny ip source any destination 129.110.1.2 0.0.0.0 time-range 3com

3Set the rules for the Office of President to access the payment server.

[SW7750-acl-adv-traffic-of-payserver]rule 2 permit ip source 129.111.1.2 0.0.0.0 destination 129.110.1.2 0.0.0.0

Activate ACL:

1Activate the traffic-of-payserver ACL .

[SW7750-Ethernet2/0/1]qos

[SW7750-qoss-Ethernet2/0/1]packet-filter inbound ip-group

traffic-of-payserver

Basic ACL Using basic ACL, filter the packet with source IP address 10.1.1.1 between 8:00 and 18:00 every day. The host connects to port Ethernet2/0/1 of the switch.

Figure 38 Access Control Configuration Example

#1

connect to Router

Switch

In the following configurations, only the commands related to ACL configurations are listed.

1Define the time range

Define time range 8:00 to 18:00.

[SW7750]time-range 3com 8:00 to 18:00 daily

2Select ACL mode

Select ip-based ACL mode.

[SW7750]acl mode ip-based

3Define the ACL for packet with source IP address 10.1.1.1. Enter the named basic ACL, named as traffic-of-host.

[SW7750]acl name traffic-of-host basic

Page 156
Image 156
3Com 10014298 Define the work time range Set the time range 800 to, Activate ACL Activate the traffic-of-payserver ACL