Acl Configuration - 3Com 4210 PWR Configuration Manual

Types of ACLs Supported
by Switch 4210 Family

ACL Configuration

Configuring a Time
Range
auto, where the rules in an ACL are matched in the order determined by the
■
system, namely the "depth-first" order.
When applying an ACL in this way, you can specify the order in which the rules in
the ACL are matched. The match order cannot be modified once it is determined,
unless you delete all the rules in the ACL and define the match order.
An ACL can be referenced by upper-layer software:
Referenced by routing policies
■
Used to control Telnet, SNMP and Web login users
■
n
When an ACL is referenced by upper-layer software to control Telnet, SNMP and
Web login users, the switch will deny packets if the packets do not match the ACL.
The Switch 4210 supports the following ACL types:
Basic ACLs
■
Advanced ACLs
■
n
ACLs defined on the Switch 4210 can be referenced by upper-layer software for
packet filtering. They cannot be applied to hardware
Time ranges can be used to filter packets. You can specify a time range for each
rule in an ACL. A time range-based ACL takes effect only in specified time ranges.
Only after a time range is configured and the system time is within the time range,
can an ACL rule take effect.
Two types of time ranges are available:
Periodic time range, which recurs periodically on the day or days of the week.
■
Absolute time range, which takes effect only in a period of time and does not
■
recur.
n
An absolute time range on the Switch 4210 Family can be within the range
1970/1/1 00:00 to 2100/12/31 24:00.
Configuration Procedure
Table 216 Configure a time range
Operation
Enter system view
Create a time range
Command
system-view
time-range time-name {
start-time to end-time
days-of-the-week [ from
start-time start-date ] [ to
end-time end-date ] | from
start-time start-date [ to
end-time end-date ] | to
end-time end-date }
ACL Configuration 293
Description
-
Required