Comware

 View Only
Expand all | Collapse all

H3C S7506E Comware 5.20 R6605P03 x Packet-Filter

This thread has been viewed 0 times
  • 1.  H3C S7506E Comware 5.20 R6605P03 x Packet-Filter

    Posted Jun 07, 2016 11:03 PM

    Hello,

    I have one H3C S7506E with Comware 5.20 R6605P03 and want to apply an Inbound ACL at a Vlan Interface. ACL has been configured properly but the command "packet-filter" doesn´t exist at Vlan Interface level.

    Is it possible to enable the packet-filter on this platoform ? Is there a software issue or MPU incompatibility ?

    MPU(M) 0:
    H3C S7506E MPU(M) with 1 BCM1125H Processor
    BOARD TYPE: LSQ1SRPB
    DRAM: 512M bytes
    FLASH: 64M bytes
    NVRAM: 512K bytes
    PCB 1 Version: VER.B
    PCB 2 Version: VER.B
    Bootrom Version: 301
    CPLD 1 Version: 006
    CPLD 2 Version: 006
    Release Version: H3C S7506E-6605P03
    Patch Version : None

    [switch-Vlan-interface235]p?
    pim
    ping
    portal
    proxy-arp

    There is no packet-fiter or firewall command at SVI level

    Thanks and my best regards,

    Carlos



  • 2.  RE: H3C S7506E Comware 5.20 R6605P03 x Packet-Filter

    Posted Jul 04, 2020 03:22 PM

    Hi there

    I know this thread is old and the original author have found the solution a long time ago.

    However, I had the exactly same problem and the solution for Comware 5 looks as follow:

    firewall packet-filter <ACL number> inbound

    In Comware 7 the command is even shorter:

    packet-filter <ACL number> inbound

    I can confirm that this works for an old 3Com MSR 20 router. Well, some devices do not support this command, the underlying hardware must have a firewall functionality.