SGS-6341-Series User Manual

Configuration result:
Switch#show firewall
Firewall st
atus: enable.
Switch#show access-lists
access-list 110(used 1 time(s)) 1 rule(s)
access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch#show access-group interface ethernet 1/10
interface name:Ethernet1/10
the ingress acl use in firewall is 110, traffic-statistics Disable.
Scenario 2:
The configuration requirements are stated below: The switch should drop all the 802.3
datagrams with 00-12-11-23-xx-xx as the source MAC address coming from interface 10.
Configuration description:
1． Create the corresponding MAC ACL.
2． Configure datagram filtering.
3． Bind the ACL to the related interface.
The configuration steps are listed below.
Switch(config)#access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff
any-destination-mac untagged-802-3
Switch(config)#access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff any
tagged-802
Switch(config)#firewall enable
Switch(config)#interface ethernet1/10
Switch(Config-If-Ethernet1/10)#mac access-group 1100 in
Switch(Config-If-Ethernet1/10)#exit
Switch(config)#exit
Configuration result:
Switch#show firewall
Firewall Status: Enable.
41-65
User’s Manual of SGS-6341 series