Chapter8ACLConguration
Note:
ThehybridACLnumberrangesfrom300to399.AhybridACLisappliedtothe
EthernetinterfaceandPON-ONUinterface.
2.ConguretheACLrules.
ZXAN(config-hybd-acl)#rule1denyanyanyanyarp
ZXAN(config-hybd-acl)#rule2denyanyany192.168.1.00.0.0.255ipingress0000.
0000.00010000.0000.0000egressany
ZXAN(config-hybd-acl)#rule3permitanyanyanyany
ZXAN(config-hybd-acl)#exit
Note:
EachhybridACLsupportsupto127rules.
Ifthetimerangeisnotcongured,theruleisalwayseffective.
3.InEthernetinterfacecongurationmode,applytheACL.
ZXAN(config)#interfacegei_1/21/1
ZXAN(config-if)#ipaccess-group300in
4.(Optional)QuerytheACLconguration.
ZXAN(config-if)#showacl300
aclhybridnumber300
rule1denyanyanyanyarpingressanyegressany
rule2denyanyany192.168.1.00.0.0.255
ipingress0000.0000.00010000.0000.0000egressany
rule3permitanyanyanyanyingressanyegressany
5.(Optional)QuerytheinterfaceboundwiththeACL.
ZXAN(config-if)#showaccess-listbound
InterfaceDirectionTypeStatusAclnumber/name
gei_1/21/1inV4HYBDsuccessful300
–EndofSteps–
8.5ConguringanIPv6HybridACL
ThissectiondescribeshowtocongureanIPv6hybridACLandapplyittoanEthernet
interface.
8-7
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential