Setting a Time Range
3.
If the result of checking an IP ACL is to permit a packet, but the result of a MAC
ACL on the same packet is to deny it, the packet will be denied (because the
decision to deny a packet has a higher priority for security reasons). A packet
will also be denied if the IP ACL denies it and the MAC ACL accepts it.
Use the Security > ACL (Configure Time Range) page to sets a time range during
which ACL functions are applied.
Command Usage
If both an absolute rule and one or more periodic rules are configured for the same
time range (i.e., named entry), that entry will only take effect if the current time is
within the absolute time range and one of the periodic time ranges.
Parameters
These parameters are displayed:
Add
◆
Time-Range Name – Name of a time range. (Range: 1-16 characters)
Add Rule
◆
Time-Range – Name of a time range.
◆
Mode
■
Absolute – Specifies a specific time or time range.
Start/End – Specifies the hours, minutes, month, day, and year at which
■
to start or end.
Periodic – Specifies a periodic interval.
■
■
Start/To – Specifies the days of the week, hours, and minutes at which
to start or end.
Web Interface
To configure a time range:
1.
Click Security, ACL.
2.
Select Configure Time Range from the Step list.
3.
Select Add from the Action list.
4.
Enter the name of a time range.
5.
Click Apply.
– 321 –
Chapter 12
| Security Measures
Access Control Lists