「干货」华为网工基础配置实例+步骤

华为6506下加入ACL步骤:

先进入配置模式.

sys

System View: return to User View with Ctrl+Z

[SW6506]

建立访问控制列表

[SW6506]acl number 4012

[SW6506-acl-adv-4012]

[SW6506-acl-adv-4012]rule 0 permit icmp source 10.1.43.0 0.0.0.255 destination 10.1.2.11 0

[SW6506-acl-adv-4012]rule 1 deny icmp source 10.1.0.0 0.0.255.255 destination 10.1.2.11 0

进入接口模式

[SW6506]int g4/0/43

[SW6506-GigabitEthernet4/0/43]qos

This interface's qos performance is limited as following:

The number of rules that can be made active is <= 120/(interface).

The number of traffic statistics that can be made active is <= 32/(interface).

The number of traffic bandwidth limits that can be made active is <= 60/(inter

face).

[SW6506-qosb-GigabitEthernet4/0/43]pack

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter ?

inbound Apply the acl on inbound packets of the interface

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ?

ip-group Apply the basic or advanced acl

link-group Apply the link-based acl

user-group Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-

2XJDZJ-SW-S6506-01-qosb-GigabitEthernet4/0/43]packet-filter inbound ip-group 4012 将ACL应用到接口,再dis cu int g4/0/43进行查看.

[SW6506-qosb-GigabitEthernet4/0/43]dis cu int g4/0/43

#

interface GigabitEthernet4/0/43

port access vlan 143

qos

packet-filter inbound ip-group 4012 rule 0 system-index 1

packet-filter inbound ip-group 4012 rule 1 system-index 2

#

return

[SW6506-qosb-GigabitEthernet4/0/43]

取消接口上的应用

[SW6506-qosb-GigabitEthernet4/0/43]qos

This interface's qos performance is limited as following:

The number of rules that can be made active is <= 120/(interface).

The number of traffic statistics that can be made active is <= 32/(interface).

The number of traffic bandwidth limits that can be made active is <= 60/(inter

face).

[SW6506-qosb-GigabitEthernet4/0/43]undo pack

[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ?

ip-group Apply the basic or advanced acl

link-group Apply the link-based acl

user-group Apply the user-defined acl

[SW6506-qosb-GigabitEthernet4/0/43]undo packet-filter inbound ip-group 4012

[SW6506-qosb-GigabitEthernet4/0/43]

閱讀更多 無情河邊柳 的文章

關鍵字: 干货 技术 华为