3Com 3032 Configuration Manual page 561

Configuring Rules for
Applying Access Control
List on Interface
one to use after viewing the current time range (special or normal). For example,
the current system time is in special time range (which is defined by
), and then the special time range rules will be used for filtering. But
acl-number
when the current system time is switched to the normal time range (which is
defined by
rule normal acl-number
for filtering.
Perform the following configurations in system view.
Table 625 Enable/Disable Filtering According to Timerange
Operation
Enable filtering according to timerange
Disable filtering according to timerange
By default, the filtering based on time range is disabled.
Only when the switch of filtering according to time range is enabled will the
special time range access rules set by the user be effective. But when this switch is
disabled, the normal time range access rules will be applied.
Set special time range
When you enable message-filtering according to time range, the firewall adopts
user defined special time range access rules for filtering during the time range
defined by the user. The newly defined special time range becomes valid about 1
minute after it is defined, and that defined last time will become invalid
automatically.
Perform the following configurations in system view.
Table 626 Set Special Time Range
Operation
Set special time range
Cancel special time range
By default, the system adopts the access rules defined for normal time range for
message filtering. The command
The format of the time range is hh:mm. The value of hh is 0 - 23 hours and the
value of mm is 0- - 59 minutes.
The command
display clock
system.
To apply access rules to specific interfaces to filter messages, it is necessary to
apply the access control list rules to the interfaces. Users can define different
access control rules for messages of both inbound and outbound directions at one
interface.
Perform the following configurations in interface view.
), the normal time range rules will be used
Command
timerange enable
timerange disable
Command
settr begin-time end-time [
begin-time end-time...... ]
undo settr
can define 6 time ranges at the same time.
settr
can be used to view the current clock status of the
Configure Firewall 557
rule special