H3C S5500-52C-EI 接口下配置packet-filter

交换机接口配置如下：

interface Ten-GigabitEthernet1/2/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 13 2501

 stp disable

 packet-filter 3999 inbound

ACL配置如下：

acl number 3999

 rule 10 deny udp destination-port eq netbios-ns

 rule 21 deny ip destination 223.104.38.3 0

配置后在上层设备仍然能够看到去往223.104.38.3的数据包。

H3C Comware Platform Software

Comware Software, Version 5.20, Release 2222P12

Copyright (c) 2004-2018 New H3C Technologies Co., Ltd. All rights reserved.

H3C S5500-52C-EI uptime is 126 weeks, 2 days, 11 hours, 43 minutes

H3C S5500-52C-EI with 1 Processor

256M    bytes SDRAM

32768K  bytes Flash Memory

Hardware Version is REV.C

CPLD Version is 002

Bootrom Version is 721

[SubSlot 0] 48GE+4SFP Hardware Version is REV.C

[SubSlot 1] 2 SFP+ Hardware Version is REV.A

[SubSlot 2] 2 SFP+ Hardware Version is REV.A