Configuring Basic Acl - H3C S5600 Series Operation Manual

Operation Manual – ACL
H3C S5600 Series Ethernet Switches
<Sysname> system-view
[Sysname] time-range test from 15:00 1/28/2006 to 15:00 1/28/2008
[Sysname] display time-range test
Current time is 13:30:32 Apr/16/2005 Saturday
Time-range : test ( Inactive )
From 15:00 Jan/28/2006 to 15:00 Jan/28/2008

1.2.2 Configuring Basic ACL

A basic ACL filters packets based on their source IP addresses.
A basic ACL can be numbered from 2000 to 2999.
I. Configuration prerequisites
To configure a time range-based basic ACL rule, you need to create the
corresponding time range first. For information about time range configuration,
refer to
The source IP addresses based on which the ACL filters packets are determined.
II. Configuration procedure
Follow these steps to define a basic ACL rule:
Enter system view
Create an ACL and
enter basic ACL view
Define an ACL rule
Configure a description
string to the ACL
Note that:
With the config match order specified for the basic ACL, you can modify any
existent rule. The unmodified part of the rule remains. With the auto match order
specified for the basic ACL, you cannot modify any existent rule; otherwise the
system prompts error information.
If you do not specify the rule-id argument when creating an ACL rule, the rule will
be numbered automatically. If the ACL has no rules, the rule is numbered 0;
otherwise, the number of the rule will be the greatest rule number plus one. If the
Configuring Time
To do...
system-view
acl number acl-number
[ match-order { auto |
config } ]
rule [ rule-id ] { deny |
permit } [ rule-string ]
description text
Range.
Use the command...
1-6
Chapter 1 ACL Configuration
Remarks
—
Required
config by default
Required
For information about
rule-string, refer to ACL
Command.
Optional
Not configured by default