S5500-48P-SI 交换机的访问控制只能做in方向，不能做out，能解决吗？
- 0关注
- 1收藏，1027浏览
问题描述：
[OA_Core]qui <OA_Core>dir /all
Directory of flash:/
0 -rw- 13655450 Jun 25 2018 20:42:25 s5500si-cmw520-r2222p10.bin
1 -rwh 3144 Apr 26 2000 13:27:52 private-data.txt
2 -rw- 7322 Apr 26 2000 13:28:09 startup.cfg
3 -rwh 716 Apr 28 2000 10:17:40 hostkey
4 -rwh 572 Apr 28 2000 10:17:46 serverkey
5 drw- - Apr 26 2000 12:00:26 seclog
6 -rwh 735 Apr 26 2000 12:36:14 hostkey_v3
7 -rw- 7296 Apr 26 2000 12:50:53 _startup_bak.cfg
8 -rw- 287 Apr 26 2000 13:28:03 system.xml
15240 KB total (1876 KB free)
| <OA_Core>dis version |
| H3C Comware Platform Software |
| Comware Software, Version 5.20, Release 2222P10 |
| Copyright (c) 2004-2018 New H3C Technologies Co., Ltd. All rights reserved. |
| H3C S5500-48P-SI uptime is 0 week, 3 days, 13 hours, 55 minutes |
| H3C S5500-48P-SI with 1 Processor |
| 128M bytes SDRAM |
| 16384K bytes Flash Memory |
| Hardware Version is REV.B |
| CPLD Version is 007 |
| Bootrom Version is 621 |
| [SubSlot 0] 48GE+4SFP Hardware Version is REV.B |
<OA_Core> sys
...
[OA_Core-Vlan-interface1]packet-filter 3000 ?
inbound Apply the acl to filter in-bound packets
[OA_Core-Vlan-interface1]packet-filter 3000
S5500-48P-SI 交换机的访问控制只能做in方向，不能做out，怎么破？
之前版本是s5500si-cmw520-r2202p19-s168.bin，把版本升级到S5500SI-CMW520-R2222P10.bin，也是一样只能做in方向，没out方向
有谁能帮忙解决下，谢谢！
- 2019-08-05提问
- 举报
-
(0)
最佳答案
- 2019-08-05回答
- 评论(1)
- 举报
-
(0)
具体配置如下。packet-filter 3000 ？后显示只有inbound选择 [OA_Core-Vlan-interface1] [OA_Core-Vlan-interface1]dis thi # interface Vlan-interface1 ip address 192.168.1.1 255.255.255.0 packet-filter 3000 inbound # return [OA_Core-Vlan-interface1]pac [OA_Core-Vlan-interface1]packet-filter 3000 ? inbound Apply the acl to filter in-bound packets [OA_Core-Vlan-interface1]packet-filter 3000
| [OA_Core-Vlan-interface1] |
| [OA_Core-Vlan-interface1]dis thi |
| # |
| interface Vlan-interface1 |
| ip address 192.168.1.1 255.255.255.0 |
| packet-filter 3000 inbound |
| # |
| return |
| [OA_Core-Vlan-interface1]pac |
| [OA_Core-Vlan-interface1]packet-filter 3000 ? |
| inbound Apply the acl to filter in-bound packets |
| [OA_Core-Vlan-interface1]packet-filter 3000 |
- 2019-08-05回答
- 评论(0)
- 举报
-
(0)
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
具体配置如下。packet-filter 3000 ？后显示只有inbound选择 [OA_Core-Vlan-interface1] [OA_Core-Vlan-interface1]dis thi # interface Vlan-interface1 ip address 192.168.1.1 255.255.255.0 packet-filter 3000 inbound # return [OA_Core-Vlan-interface1]pac [OA_Core-Vlan-interface1]packet-filter 3000 ? inbound Apply the acl to filter in-bound packets [OA_Core-Vlan-interface1]packet-filter 3000