1-11z As S5100-SI series switches do not support port group configuration, they do not support ACLapplication on port groups.z After an ACL is assigned to a port group, it will be automatically assigned to the ports that aresubsequently added to the port group.Configuration example# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group. system-view[Sysname] port-group 1[Sysname-port-group-1] packet-filter inbound ip-group 2000Assigning an ACL to a PortConfiguration prerequisitesBefore applying ACL rules to a VLAN, you need to define the related ACLs. For information aboutdefining an ACL, refer to section Configuring Basic ACL, section Configuring Advanced ACL, sectionConfiguring Layer 2 ACL.Configuration procedureTable 1-8 Apply an ACL to a portOperation Command DescriptionEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Apply an ACL to the port packet-filter inbound acl-ruleRequiredFor description on the acl-ruleargument, refer to ACLCommand.You cannot assign an ACL to a member port of a port group on an S5100-EI series switch.Configuration example# Apply ACL 2000 to GigabitEthernet 1/0/1 to filter the inbound packets. system-view[Sysname] interface GigabitEthernet 1/0/1[Sysname-GigabitEthernet1/0/1] packet-filter inbound ip-group 2000
