Optional) Creating The Time Range Of The Acl6 - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
l
----End

10.4.3 (Optional) Creating the Time Range of the ACL6

When a time range is specified for the ACL6, the ACL6 takes effect only in this time range. If
no time range is specified for the ACL6, the ACL6 is always effective until it is deleted or the
rules of the ACL6 are deleted.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
time-range time-name { start-time to end-time days | from time1 date1 [ to time2
date2 ] }
The time range is created.
You can set the same name for multiple time ranges to describe a special period. For example,
three time ranges are set with the same name, that is, test.
l Time range 1: 2009-01-01 00:00 to 2009-12-31 23:59
l Time range 2: 8:00-18:00 on Monday to Friday
l Time range 3: 14:00-18:00 on Saturday and Sunday
The time range test includes 8:00-18:00 on Monday to Friday and 14:00-18:00 on Saturday and
Sunday in the year 2009.
----End
Issue 01 (2011-07-15)
– The value of a basic ACL6 ranges from 2000 to 2999.
– The value of an advanced ACL6 ranges from 3000 to 3999.
Creating an ACL6 based on the name
1. Run:
system-view
The system view is displayed.
2. Run:
acl ipv6 name acl6-name [ advance | basic | acl6-number ]
An ACL6 is created based on the name.
If the number of a named ACL6 is not specified, the S3700 automatically allocates a
number to the named ACL6. The following situations are involved:
– If the type of a named ACL6 is specified, the number of the named ACL6 allocated
by the S3700 is the maximum value of the named ACL6 of the type.
– If the number and the type of a named ACL6 are not specified, the S3700 considers
the named ACL6 as the advanced ACL6 and allocates 3999 to the named ACL6.
The S3700 does not allocate the number to a named ACL6 repeatedly.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
10 ACL Configuration
234