How Do I Configure Access Control

Dear friend！

You can run the display sysman ip-access command to check whether permitted address segments are configured and run the display sysman ip-refuse command to check whether denied address segments are configured.

If the IP address of an access device is in the denied IP address segments, run the undo sysman ip-refuse command to delete the IP address of the access device from the denied IP address list.

Thank you!

Procedure
1. Log in to and configure the ONU.
You can remote log in to the ONU from the OLT to perform the configuration.

2. Create SVLANs.
Create smart SVLANs 1001-1016 in batches with attribute common.

huawei(config)#vlan 1001-1016 smart
3. Add the upstream port to SVLANs.
Add upstream port 0/0/1 to SVLANs.

huawei(config)#port vlan 1001-1016 0/0 1
4. Configure a traffic profile.
Run the display traffic table ip command to query the existing traffic profiles in the system. If the existing traffic profile in the system does not meet the requirement, run the traffic table ip command to add a traffic profile.

Assume that the committed information rate (CIR) is 4 Mbit/s, priority of upstream packets is 0, and downstream packets are scheduled based on the priorities specified in the traffic profile. Configure traffic profile 8.
5. Add a service port.
Create service port 101, bind it to port 0/3/1, set the user-side VLAN to untagged and bind the VLAN to traffic profile 8.
Note:
This example creates one service port as an example. Each service port maps a user. When configuring another service port, map the corresponding SVLAN.
huawei(config)#service-port 101 vlan 1001 eth 0/3/1 multi-service user-vlan
untagged rx-cttr 8 tx-cttr 8
6. Save the data.
huawei(config)#save

https://forum.huawei.com/enterprise/en/how-do-i-configure-access-control/thread/616884-100181