Optional) Creating The Time Range Of The Acl6; Configuring A Basic Acl6 - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
----End

9.4.3 (Optional) Creating the Time Range of the ACL6

When a time range is specified for the ACL6, the ACL6 takes effect only in this time range. If
no time range is specified for the ACL6, the ACL6 is always effective until it is deleted or the
rules of the ACL6 are deleted.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
time-range time-name { start-time to end-time days | from time1 date1 [ to time2
date2 ] }
The time range is created.
You can set the same name for multiple time ranges to describe a special period. For example,
three time ranges are set with the same name, that is, test.
l Time range 1: 2009-01-01 00:00 to 2009-12-31 23:59
l Time range 2: 8:00-18:00 on Monday to Friday
l Time range 3: 14:00-18:00 on Saturday and Sunday
The time range test includes 8:00-18:00 on Monday to Friday and 14:00-18:00 on Saturday and
Sunday in the year 2009.
----End

9.4.4 Configuring a Basic ACL6

Basic ACL6s can classify data packets based on the source IP address.
Procedure
Step 1 Run:
system-view
Issue 01 (2011-07-15)
2. Run:
acl ipv6 name acl6-name [ advance | basic | acl6-number ]
An ACL6 is created based on the name.
If the number of a named ACL6 is not specified, the S2700 automatically allocates a
number to the named ACL6. The following situations are involved:
– If the type of a named ACL6 is specified, the number of the named ACL6 allocated
by the S2700 is the maximum value of the named ACL6 of the type.
– If the number and the type of a named ACL6 are not specified, the S2700 considers
the named ACL6 as the advanced ACL6 and allocates 3999 to the named ACL6.
The S2700 does not allocate the number to a named ACL6 repeatedly.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 ACL Configuration
166