[Ayrat]

Возникла задача, в связи с переходом на оборудование SNR их нужно настроить подобно старым Huawei"ям S23.

В частности нужно настроить фильтры, в которых "вырезается" локалка.

 

Пример правил на Huawei:

 

 

 

acl number 2005

description Multicast Policies

step 10

rule 10 permit source 2xx.0.12.0 0.0.0.31

rule 20 permit source 2xx.1xx.0.0 0.0.255.255

rule 999 deny

 

acl number 3000

description e190

rule 10 permit igmp

rule 20 permit udp source-port eq 1234

rule 100 deny ip

 

acl number 4000

description e190

rule 10 permit l2-protocol 0x8863

rule 20 permit l2-protocol 0x8864

rule 25 permit l2-protocol 0x8100

rule 100 deny

 

 

acl number 4001

rule 10 permit l2-protocol 0x8863

rule 20 permit l2-protocol 0x8864

rule 30 permit l2-protocol ip

rule 40 permit l2-protocol arp

rule 50 deny

 

acl number 3500

rule 10 deny tcp destination-port range 135 139

rule 20 deny tcp destination-port eq 445

rule 30 deny udp destination-port range netbios-ns netbios-ssn

 

 

traffic-filter vlan 1 inbound acl 4001 rule 10

traffic-filter vlan 1 inbound acl 4001 rule 20

traffic-filter vlan 1 inbound acl 4001 rule 30

traffic-filter vlan 1 inbound acl 4001 rule 40

traffic-filter vlan 1 inbound acl 4001 rule 50

traffic-filter vlan 1 inbound acl 3500 rule 10

traffic-filter vlan 1 inbound acl 3500 rule 20

traffic-filter vlan 1 inbound acl 3500 rule 30

traffic-filter vlan 315 inbound acl 4000 rule 10

traffic-filter vlan 315 inbound acl 4000 rule 20

traffic-filter vlan 315 inbound acl 4000 rule 25

traffic-filter vlan 315 inbound acl 3000 rule 10

traffic-filter vlan 315 inbound acl 3000 rule 20

traffic-filter vlan 315 inbound acl 4000 rule 100

 

 

Как мне прописать те же правила на SNR?

[Andrey Shepelev]

посмотрите тут и тут