H3C S7506E Comware 5.20 R6605P03 x Packet-Filter

[CVLo]

Hello,

I have one H3C S7506E with Comware 5.20 R6605P03 and want to apply an Inbound ACL at a Vlan Interface. ACL has been configured properly but the command "packet-filter" doesn´t exist at Vlan Interface level.

Is it possible to enable the packet-filter on this platoform ? Is there a software issue or MPU incompatibility ?

MPU(M) 0:
H3C S7506E MPU(M) with 1 BCM1125H Processor
BOARD TYPE: LSQ1SRPB
DRAM: 512M bytes
FLASH: 64M bytes
NVRAM: 512K bytes
PCB 1 Version: VER.B
PCB 2 Version: VER.B
Bootrom Version: 301
CPLD 1 Version: 006
CPLD 2 Version: 006
Release Version: H3C S7506E-6605P03
Patch Version : None

[switch-Vlan-interface235]p?
pim
ping
portal
proxy-arp

There is no packet-fiter or firewall command at SVI level

Thanks and my best regards,

Carlos

[lorn10]

Hi there

I know this thread is old and the original author have found the solution a long time ago.

However, I had the exactly same problem and the solution for Comware 5 looks as follow:

firewall packet-filter <ACL number> inbound

In Comware 7 the command is even shorter:

packet-filter <ACL number> inbound

I can confirm that this works for an old 3Com MSR 20 router. Well, some devices do not support this command, the underlying hardware must have a firewall functionality.