3Com 10014298 Configuring ACL Control

Configuring ACL Control 175

Figure 47 Traffic Statistics

To create this configuration:

1Define the time range 8:00 to 18:00.

[SW7750]time-range 3com 8:00 to 18:00 daily

2Define traffic rules for PC1 packets.

[SW7750]acl number 2000

[SW7750-acl-basic-2000]rule 0 permit ip source 1.0.0.1 0.0.0.0

time-range 3com

3Count PC1 packets, view the statistics with the display command.

Enter QoS view.

[SW7750-GigabitEthernet7/0/1]qos

[SW7750-qosb-GigabitEthernet7/0/1]

Count PC1 packets, view the statistics with the display command.

[SW7750-qosb-GigabitEthernet7/0/1]traffic-statistic inbound ip-group

1 rule 0

[SW7750]display qos-interface GigabitEthernet7/0/1 traffic-statistic

Configuring ACL Control

The Switch 7750 provides several logon and device access measures, including

TELNET access, SNMP access, and HTTP access. The security control, over the

access measures, is provided with the switches to prevent illegal users from

logging onto and accessing the devices. There are two levels of security controls.

At the first level, the user connection is controlled with an ACL filter and only legal

users can be connected to the switch. At the second level, a connected user can

log on to the device only if the user can pass the password authentication.

This chapter introduces how to configure the first level security control to filter the

logon users with ACL. For the information about how to configure the first level

security, see “System Access”.

Configuring ACL Control is described in the following sections:

■Configuring ACL Control for TELNET Users

■Configuring ACL Control for SNMP Users

GE7/0/8

GE7/0/1 GE3/0/2

VLAN2,

1.0.0.1/8 VLAN3,

2.0.0.1/8

PC1 PC2

Contents

Main 3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064 C ABOUT THIS GUIDE S YSTEM A PORT CONFIGURATION VLAN C IP ROUTING PROTOCOL OPERATION M ULTICAST P QOS/ OPERATION STP O AAA AND RADIUS OPERATION SYSTEM MANAGEMENT Page Page ABOUT THIS GUIDE This guide describes the 3Com Switch 7750 and how to configure it in version 3.0 of the software. Tabl e 2 lists the text conventions used in this book. Conventions Tabl e 1 Notice Icons Table 2 Text Conventions 1 Product Overview Configuring the Switch 7750 Figure 1 Setting Up the Local Configuration Environment Through the Console Port Table 3 Function Features (continued) Page Page Page Ethernet Page Page Page Page Page Page Page Page Page Page Page Command Line Interface Page Tabl e 20 Function Feature of Command View Page Page Tabl e 23 Editing Functions Tabl e 24 Display Functions Table 22 Retrieve History Command Page 2 Ethernet Port Overview Page Page Page Page Page Page Configuring Link Aggregation Page Page Page Page Page Page Perform the following configuration in Ethernet port view. Tabl e 44 Configure Port Priority Tabl e 45 Display and Debug Link Aggregation Page Page Page 3 VLAN Overview Configuring VLANs Page Page Page Page Page Page 3Configure the protocol VLAN on port G1/0/1 Configuring GARP/GVRP Page Page Page Page Page 4 Configuring IP Address Page Page Configuring Address Resolution Protocol (ARP) Page DHCP Relay Page Page Page Page IP Performance Page Page Page 5 IP Routing Protocol Overview Page Page Static Routes Page Page Page Page RIP Page Page Page Page Page Page Page Page Page IP Routing Policy Page Page Page Page Page Route Capacity Page Page Page 6 IP Multicast Overview Page Page Page Page Configuring Common Multicast Page Configuring IGMP Page Page Page Page Page Page Page IGMP Snooping Page Page Page Page Page Configuring PIM-DM Page Page Page Page Figure 33 PIM-DM Configuration Networking 2Enable PIM-DM. Table 144 Displaying and Debugging PIM-DM Configuring PIM-SM Page Page Page Page Page Page Page Execute the debugging command in user view to debug PIM-SM. Figure 35 PIM-SM Configuration Networking Configure Switch A 1Enable PIM-SM. Tabl e 157 Display and Debug PIM-SM Configure Switch B 1Enable PIM-SM. 2Configure the C-BSR. 3Configure the C-RP. 4Configure PIM domain border. GMRP Page Page 7 ACL Overview Page Configuring ACLs Page Page Page ACL Configuration Examples Page Configuring QoS Page Page Page Page Page Page Page Page Page Tabl e 183 Configuring Traffic Statistics Tabl e 184 Display and Debug QoS Page Page Page Page Page Page Page Configuring ACL Control Page Page Page Page Page 8 STP Overview Configuring STP Page Page Page Page MSTP Overview Page Page Configuring MSTP Page Page Page Page Page Page Page Page Page Perform the following configuration in system view. By default, the switch calculates the default Path Cost of a port by the IEEE 802.1t standard. Tabl e 204 Specifying the Standard To Be Followed in Path Cost Calculation Tabl e 205 Cost Corresponding to the Port Speed of Different Standard Page Page Page Page Page Digest Snooping Page 9 IEEE 802.1x Page Page Page Page Page Page Page Implementing the AAA and RADIUS Protocols Page Configuring AAA Page Page Configuring the RADIUS Protocol Page Page Page Page Page Page Page Page Page Configuring HWTACACS Page Page Page Page Page Page The real-time accounting interval defaults to 12 minutes. Displaying and Debugging the AAA, RADIUS, and HWTACACS Protocols Table 255 Numbers of users and the recommended intervals Tabl e 256 Displaying and Debugging AAA and RADIUS/HWTACACS Protocol AAA, RADIUS, and HWTACACS Protocol Configuration Examples Page Page Troubleshooting AAA, RADIUS, and HWTACACS Configurations Page 11 File System Page Page Page Page Page Managing the MAC Address Table Page Page Page Managing Devices Page Maintaining and Debugging the System Page Page Page Page Page Page The system assigns a channel in each output direction by default. See Tabl e 293. Tabl e 293 Numbers and Names of the Channels for Log Output Tabl e 294 Syslog-Defined Severity Table 292 Log Output (continued) Page Page SNMP Page Page Page Page Page Page Tabl e 310 Enable/Disable Transmission of Trap Information Tabl e 311 Disabling SNMP Agent Tabl e 312 Displaying and Debugging SNMP Page RMON Page Page Page NTP Page Page Page Page Page Page Page Page After the synchronization, SW77502 turns into the following status: