Ipv4 Acl Configuration - 3Com S7906E Configuration Manual

2

IPv4 ACL Configuration

When configuring an IPv4 ACL, go to these sections for information you are interested in:
Creating a Time Range
Configuring a Basic IPv4 ACL
Configuring an Advanced IPv4 ACL
Configuring an Ethernet Frame Header ACL
Copying an IPv4 ACL
Displaying and Maintaining IPv4 ACLs
IPv4 ACL Configuration Example
Creating a Time Range
You can specify a time range for each rule in an ACL. A time range-based ACL takes effect only in
specified time ranges. Only after a time range is configured and the system time is within the time range,
can an ACL rule take effect.
Two types of time ranges are available:
Periodic time range, which recurs periodically on the day or days of the week.
Absolute time range, which takes effect only in a period of time and does not recur.
Configuration Procedure
Follow these steps to create a time range:
To do...
Enter system view
Create a time range
Display the configuration
and status of one or all
time ranges
Note that:
Periodic time range created using the time-range time-range-name start-time to end-time days
command. A time range thus created recurs periodically on the day or days of the week.
Absolute time range created using the time-range time-range-name { from time1 date1 [ to time2
date2 ] | to time2 date2 } command. Unlike a periodic time range, a time range thus created does
not recur. For example, to create an absolute time range that is active between January 1, 2004
00:00 and December 31, 2004 23:59, you may use the time-range test from 00:00 01/01/2004 to
23:59 12/31/2004 command.
Use the command...
system-view
time-range time-range-name { start-time to
end-time days [ from time1 date1 ] [ to time2
date2 ] | from time1 date1 [ to time2 date2 ] |
to time2 date2 }
display time-range { time-range-name |
all }
2-1
Remarks
––
Required
Optional
Available in any view