H3C-ACL

H3C的ACL分为basic（标准）和advanced（扩展）两类：
basic是**基本acl**编号2000-2999，对源地址控制，
advanced是**高级acl**，编号3000-3999
命令如下：

### 基本acl
```
#
 time-range working_time 08:00 to 18:00 daily
#
acl number 2000
 rule 0 permit source 10.1.1.1 0 time-range working_time
 rule 5 deny source any time-range working_time
#
interface GigabitEthernet1/0/1
 packet-filter 2000 inbound
#
```

### 高级acl

```
#
 time-range working_time 08:30 to 18:00 working-day
#
acl number 3000
 rule 0 permit tcp source 10.1.4.3 0 destination-port eq www time-range working_time
 rule 0 deny tcp destination-port eq www time-range working_time
acl number 3001
 rule 0 permit ip source 10.1.3.1 0 destination 11.1.1.100 0
 rule 0 permit ip destination 11.1.1.100 0
#
interface GigabitEthernet1/0/1
 packet-filter 3000 inbound
#
interface GigabitEthernet1/0/2
 packet-filter 3001 inbound
```

**acl在vlan中引用**
```
acl advanced 3000    //创建一个高级ACL
rule 0 permit ip source 192.168.3.0 0.0.0.255  destination any
//允许源地址3.0网段去往任何目标地址

interface Vlan-interface50
 ip address 192.168.10.1 255.255.255.0
 packet-filter 3050 inbound
 dhcp server apply ip-pool vlan50

```