Specifying The Matching Order Of Acl Rules Sent To A Port; Configuring Time Ranges - 3Com 7757 Configuration Manual

640 C 60: ACL C
HAPTER
Specifying the
Matching Order of
ACL Rules Sent to a
Port
Configuration Procedure
Configuration Example
Configuring Time
Ranges
Configuration Procedure
ONFIGURATION
<SW7750> system-view
[SW7750] acl mode link-based
[SW7750] display acl mode
The current acl mode: link-based.
The acl match-order { config | auto } command is used to set the matching
order of ACL rules when they are referenced by softwares. While the acl order
command is used to set the matching order of ACL rules after they are applied to
hardware). The Switch 7750 supports three matching orders of ACL rules applied
to a port: depth-first, first-config-first-match, and last-config-first match.
You can specify one of the three orders.
Table 508 Set the matching order of ACL rules applied to a port
Operation
Enter system view
Set the matching order of the
configured ACL rules sent to
a port
Display the matching order of
the ACL rules applied to a
port
# Specify the matching order of ACL rules sent to hardware as
first-config-first-match.
<SW7750> system-view
[SW7750] acl order first-config-first-match
[SW7750] display acl order
the current order is first-config-first-match
The time range configuration tasks include configuring periodic time sections and
configuring absolute time sections. A periodic time section appears as a period of
time in a day of the week, while an absolute time section appears in the form of
"the start time to the end time".
Table 509 Configure a time range
Operation
Enter system view
Create a time range
Command
system-view
acl order { auto |
first-config-first-match |
last-config-first-match }
display acl order
Command
system-view
time-range
time-name { start-time to
end-time days-of-the-week
[ from start-time start-date ]
[ to end-time end-date ] |
from start-time start-date [ to
end-time end-date ] | to
end-time end-date }
Description
-
Required
By default, the configured
ACL rules sent to a port
match in the depth-first
order, that is, the auto mode.
Optional
The display command can be
executed in any view
Description
-
Required