Configuring an ACL-based DCN Policy

An ACL-based DCN policy can be used to filter DCN packets. The DCN packets that fail to match the ACL rule are discarded, improving DCN network security.

Prerequisites

Before configuring an ACL-based DCN policy, complete either of the following tasks:

Create a basic ACL using the acl (basic ACL) command and configure a rule for the ACL using the rule (basic ACL view) command in the basic ACL view.
Create an advanced ACL using the acl (advanced ACL) command and configure a rule for the ACL using the rule (advanced ACL view) command in the advanced ACL view.

Procedure

Run system-view
The system view is displayed.
Run dcn
The DCN view is displayed.
Run packet-policy { acl-name acl-name | basic-number | adv-number }
An ACL-based DCN policy is configured.

A basic or an advanced ACL can be specified in the command. ACLs numbered 2000 to 2999 are basic ACLs; ACLs numbered 3000 to 3999 are advanced ACLs.
Run commit
The configuration is committed.

Parent Topic: Improving DCN Security

Copyright © Huawei Technologies Co., Ltd.

Copyright © Huawei Technologies Co., Ltd.

< Previous topic Next topic >