In this thread, I'll tell you the application of ACL and ACL configuration method.
1 ACL Application Scope
ACL cannot independently control network access behaviors or restrict network traffic. It must be applied to a service module.
2 Working Mechanism of the ACL Module
Different service modules handle the packets matching and not matching the ACL in different ways.
For example, an ACL is applied to a traffic policy. If the ACL contains rules but packets do not match these rules, the packets are forwarded. However, if the ACL is applied to the Telnet service, these packets are discarded.
If an ACL is applied to a blacklist, the packets matching the rules are discarded no matter whether the ACL rules are permit or deny.
Therefore, you must exercise when applying an ACL to a service module.
The following table provides the ACL handling mechanism of each module.
3 ACL Configuration
The ACL configuration varies according to the service modules. The following table lists the ACL configuration on each module.
4 ACL Configuration Cases
Case 1: Use ACL to restrict Telnet access permission.
To ensure the security of remotely maintained devices, only the administrator (10.1.1.1/32) can log in to the switch through Telnet.
https://forum.huawei.com/enterprise/en/acl-application-all-about-switches-19/thread/232535-861