Chapter 2 Ipv4 Acl Configuration - H3C S3610-28P Operation Manual

Operation Manual – ACL
H3C S3610&S5510 Series Ethernet Switches

Chapter 2 IPv4 ACL Configuration

When configuring an IPv4 ACL, go to these sections for information you are interested
in:
Creating a Time Range
Configuring a Basic IPv4 ACL
Configuring an Advanced IPv4 ACL
Configuring an Ethernet Frame Header ACL
Configuring a User-Defined ACL
Copying an IPv4 ACL
Displaying and Maintaining IPv4 ACLs
IPv4 ACL Configuration Example
2.1 Creating a Time Range
You can specify a time range for each rule in an ACL. A time range-based ACL takes
effect only in specified time ranges. Only after a time range is configured and the
system time is within the time range, can an ACL rule take effect.
Two types of time ranges are available:
Periodic time range, which recurs periodically on the day or days of the week.
Absolute time range, which takes effect only in a period of time and does not recur.
2.1.1 Configuration Procedure
Follow these steps to create a time range:
Enter system view
Create a time range
Display the configuration
and state of a specified
or all time ranges
To do...
system-view
time-range time-name
{ start-time to end-time days
[ from time1 date1 ] [ to time2
date2 ] | from time1 date1 [ to
time2 date2 ] | to time2 date2 }
display time-range
{ time-name | all }
Chapter 2 IPv4 ACL Configuration
Use the command...
2-1
Remarks
––
Required
Optional
Available in any view