Zte ZXR10 8900 Series User Manual

Chapter9ACLConguration
calport,VLANorSmartgroupvirtualinterface)supportstwoACL
processingmodesandcanprocesspacketsinthesetwomodes.
ConfiguringACLs
ACLcongurationincludes:
�DeneanACLrule
�Congureatimerange
�ApplytheACLtoaport
DefiningACLs
Thefollowingissuesaretobetakenintoaccountwhendening
ACLrules.
�Whenapacketmeetsmultiplerules,rstrulewillbematched.
Rulesequenceisveryimportant.Generally,rulesinasmall
rangeareputinthefrontandrulesinalargerangeareputin
theback.
�Consideringnetworksecurity,systemwilladdanimplicitdeny
ruletotheendofeachACLautomaticallyfordenyingallthe
packets.Apermitruleforallowingallpacketsshouldbede-
nedattheendofeachACL.
DefiningStandardACL
TocongurestandardACL,performthefollowingsteps.
Step
CommandFunction
1
ZXR10(config)#aclstandard{number<acl-number
>|name<acl-name>|alias<alias-name>}[match-
order{auto|config}]
ThisentersstandardACL
congurationmode
2
ZXR10(config-std-acl)#rule<rule-no>{permit|deny
}{<source>[<source-wildcard>]|any}[time-range
<timerange-name>]
Thisdenesrules
3
ZXR10(config-std-acl)#move<rule-no>after
<rule-no>
Thismovesarule
4
ZXR10(config-std-acl)#attachtime-range<Time
rangename>to<ruleid>
Thisbindsatimerangetoa
rule
ExampleThisexampledescribeshowtodeneastandardACLwhichal-
lowsaccessofmessagesfromnetwork192.168.1.0/24butdenies
messagesfromsourceIPaddress192.168.1.100.
ZXR10(config)#aclbasicnumber10
ZXR10(config-std-acl)#rule1deny192.168.1.1000.0.0.0
CondentialandProprietaryInformationofZTECORPORATION79

Zte ZXR10 8900 Series Specifications

General

Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Operating Humidity	10% to 90% (non-condensing)
Storage Humidity	5% to 95% (non-condensing)
Ports	10/100/1000BASE-T
Layer Support	Layer 2 and Layer 3
VLAN Support	4K VLANs
QoS	8 priority queues per port
Management	CLI, Web, SNMP, RMON
Power Supply	AC or DC
Redundancy	Power supply redundancy, fan redundancy