SGS-6341-Series User Manual

53-3
clear vacl [in | out] statistic vlan
[<vlan-id>]
Clear the statistic information of VACL.
(Egress filtering is not supported by
switch.)
53.3 VLAN-ACL Configuration Example
A company’s network configuration is shown below. All departments are divided by different VLANs.
Technique department is Vlan1 and finance department is Vlan2. It is required that technique department can
access the outside network at timeout, but finance department is not allowed to access the outside network at
any time for the sake of security. Then the following policies are configured:
 Set the policy VACL_A for technique department. At timeout they can access the outside network, the
rule as permit, but other times the rule as deny, and the policy is applied to Vlan1.
 Set the policy VACL_B of ACL for finance department. At any time they can not access the outside
network, but can access the inside network with no limitation, and apply the policy to Vlan2.
Network environment is shown as below:
Figure 53-1: VLAN-ACL configuration example
Configuration example:
1) First, configure a time range, the valid time is the working hours of working day:
Switch(config)#time-range t1
Switch(config-time-range-t1)#periodic weekdays 9:00:00 to 12:00:00
Switch(config-time-range-t1)#periodic weekdays 13:00:00 to 18:00:00
2) Configure the extended acl_a of IP, at working hours; it only allows to access the resource within the
internal network (such as 192.168.0.255).
User’s Manual of SGS-6341 series