1-15Configuration procedure# Define a periodic time range that is active from 8:00 to 18:00 everyday. system-view[Sysname] time-range test 8:00 to 18:00 daily# Define ACL 2000 to filter packets with the source IP address of 10.1.1.1.[Sysname] acl number 2000[Sysname-acl-basic-2000] rule 1 deny source 10.1.1.1 0 time-range test[Sysname-acl-basic-2000] quit# Apply ACL 2000 on Ethernet 1/0/1.[Sysname] interface Ethernet1/0/1[Sysname-Ethernet1/0/1] packet-filter inbound ip-group 2000Advanced ACL Configuration ExampleNetwork requirementsDifferent departments of an enterprise are interconnected through a switch. The IP addressof the wage query server is 192.168.1.2. The R&D department is connected to Ethernet1/0/1 of the switch. Apply an ACL to deny requests from the R&D department and destinedfor the wage server during the working hours (8:00 to 18:00).Network diagramFigure 1-4 Network diagram for advanced ACL configurationConfiguration procedure# Define a periodic time range that is active from 8:00 to 18:00 everyday. system-view[Sysname] time-range test 8:00 to 18:00 working-day# Define ACL 3000 to filter packets destined for wage query server.[Sysname] acl number 3000[Sysname-acl-adv-3000] rule 1 deny ip destination 192.168.1.2 0 time-range test[Sysname-acl-adv-3000] quit
