Brief Introduction to ACL 357
Configuration Procedure
In the following configurations, only the commands related to ACL configurations are
listed.
1Define the work time range
Define time range from 8:00 to 18:00.
[SW5500]time-range 3Com 8:00 to 18:00 working-day
2Define the ACL to access the payment server.
aEnter the numbered advanced ACL, number as 3000.
[SW5500]acl number 3000 match-order config
bDefine the rules for other department to access the payment server.
[SW5500-acl-adv-3000]rule 1 deny ip source any destination 129.110.1.2
0.0.0.0 time-range 3Com
cDefine the rules for the President’s Office to access the payment server.
[SW5500-acl-adv-3000]rule 2 permit ip source 129.111.1.2 0.0.0.0
destination 129.110.1.2 0.0.0.0
3Activate ACL.
Activate the ACL 3000.
[SW5500-GigabitEthernet1/0/50]packet-filter inbound ip-group 3000
Basic ACL Configuration
Example
Networking Requirements
Using basic ACL, filter the packet whose source IP address is 10.1.1.1 during the time
range 8:00 ~ 18:00 every day. The host connects port GigabitEthernet1/0/50 of the
Switch.
Networking Diagram
Figure89 Access Control Configuration Example
Configuration Procedure
In the following configurations, only the commands related to ACL configurations are
listed.
1Define the time range
Define time range from 8:00 to 18:00.
[SW5500]time-range 3Com 8:00 to 18:00 daily
2Define the ACL for packet which source IP is 10.1.1.1.
aEnter the number basic ACL, number as 2000.
Switch
#1 connect to Router