Acl Configuration; Types Of Acls Supported By S5100 Series Ethernet Switches; Configuring Time Range - H3C S5100-SI Operation Manual

When an ACL is directly applied to hardware for packet filtering, the switch will permit packets if the
packets do not match the ACL.
When an ACL is referenced by upper-layer software to control Telnet, SNMP and Web login users,
the switch will deny packets if the packets do not match the ACL.

Types of ACLs Supported by S5100 Series Ethernet Switches

S5100-EI Series Ethernet switches support the following types of ACLs.
Basic ACLs
Advanced ACLs
Layer 2 ACLs
Note that ACLs defined on S5100 Series Ethernet switches can be applied to hardware directly or
referenced by upper-layer software for packet filtering.
S5100-SI series switches running Release 2201 or earlier do not support Layer 2 ACL
configuration.
ACLs defined on S5100-SI series switches running Release 2201 or earlier can only be referenced
by upper-layer software; they cannot be applied to hardware.

ACL Configuration

Configuring Time Range

Time ranges can be used to filter packets. You can specify a time range for each rule in an ACL. A time
range-based ACL takes effect only in specified time ranges. Only after a time range is configured and
the system time is within the time range, can an ACL rule take effect.
Two types of time ranges are available:
Periodic time range, which recurs periodically on the day or days of the week.
Absolute time range, which takes effect only in a period of time and does not recur.
An absolute time range on an H3C S5100 Series Ethernet Switches can be within the range 1970/1/1
00:00 to 2100/12/31 24:00.
1-3