這個是財務網絡的一個問題, 要求財務的某臺機器能訪問其他部門區的打印機. 其他部門是不能訪問到財務網絡的.

?

華為alc配置實例:-traffic-filter

# 在VLAN100上配置基于ACL的報文過濾，允許源IP地址為192.168.0.2/32的報文通過，丟棄其他報文。

<HUAWEI> system-view[HUAWEI] vlan 100[HUAWEI-vlan100] quit[HUAWEI] acl name test 3000[HUAWEI-acl-adv-test] rule 5 permit ip source 192.168.0.2 0[HUAWEI-acl-adv-test] rule 10 deny ip source any[HUAWEI-acl-adv-test] quit[HUAWEI] traffic-filter vlan 100 inbound acl name test

?

?

traffic-filter實例:

int vlan15acl name wifiToServer 3000rule 5 per ip so 192.168.5.95 0rule 10 per ip so 192.168.5.139 0rule 15 per ip so 192.168.5.165 0rule 20 per ip so 192.168.5.212 0rule 25 per ip so 192.168.5.241 0rule 30 per ip so 192.168.5.242 0traffic-filter vlan 15 inbound acl name wifiToServer

dhcp地址池配置:

interface Vlanif100ip address 192.168.100.1 255.255.255.0dhcp select interfacedhcp server static-bind ip-address 192.168.100.241 mac-address 28f0-7647-11fddhcp server static-bind ip-address 192.168.100.242 mac-address fcc2-deef-408cdhcp server static-bind ip-address 192.168.100.243 mac-address 00ee-bd87-d99adhcp server static-bind ip-address 192.168.100.244 mac-address 7423-448d-12e9dhcp server static-bind ip-address 192.168.100.245 mac-address cc08-8db5-05aadhcp server static-bind ip-address 192.168.100.56 mac-address 0008-caa2-1aa3dhcp server excluded-ip-address 192.168.20.100 192.168.20.120

dhcp ip是否被分配:

dis ip pool interface Vlanif15 used | include fcc2-deef-4080 192.168.5.241

dhcp釋放used地址:

reset ip pool int vlanif20 x.x.x.x

dhcp釋放conflict ip:

reset ip pool int vlanif20 conflict ?conflict ip是無法被分配的,也無法在used里查到,也無法在借口綁定給用戶,查看沖突ip: dis ip pool intterface vlan 100 conflict

dhcp地址池綁定ip

reset ip pool int vlanif15 192.168.5.56 ?如果已被分配了,為確保最小震蕩,先釋放,后綁定.ysysint vlanif15dhcp server static-bind ip-address 192.168.5.56 mac-address 0008-caa2-1a03

轉載于:https://www.cnblogs.com/iiiiher/p/5941996.html

總結

以上是生活随笔為你收集整理的[na]华为acl(traffic-filter)和dhcp管理的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。