Defining Customized Acl; Configuring Time Range - Zte ZXR10 8900 Series User Manual

Step Command
3
ZXR10(config-ext-v6acl)#
before}<rule-no>
4
ZXR10(config-ext-v6acl)#
range name> to <rule id>
Example
Step Command
1 acl user-defined {number
ZXR10(config)#
<3000-3499>| name <acl-name>| alias <
alias-name>}
2
ZXR10(config-user-acl)#
| deny}{any |{tag <tag-num><offset><rule-
string><rule-mask>&<1-4>}}[time-range <
timerange-name>]
3
ZXR10(config-user-acl)#
before}<rule-no>
4
ZXR10(config-user-acl)#
range name> to <rule id>
Example
move <rule-no>{after |
attach time-range <Time
This example shows how to configure extended IPv6 ACL. It de-
fines an ACL that allows packets from network segment 3000::/16
to 4000::/16 to pass.
ZXR10(config)#ipv6 acl extended 2500
ZXR10(config-ext-v6acl)#rule 1 permit 3000::/16 4000::/16

Defining Customized ACL

To configure customized ACL, perform the following steps.
rule <rule-id>{permit
move <rule-no>{after |
attach time-range <Time
This example shows how to configure extended IPv6 ACL.
A user defines an ACL to allow packets with the following features
to pass:
� Tag is 1.
� Rule is 0x1111.
� Mask is 0x000f.
� Offset is 4 bytes.
ZXR10(config)#acl user-define number 3000
ZXR10(config-user-acl)#rule 1 permit tag 1 4 0x1111 0x000f

Configuring Time Range

To configure time range, perform the following steps.
Confidential and Proprietary Information of ZTE CORPORATION
Chapter 9 ACL Configuration
Function
This moves a rule
This binds a time range to a
rule
Function
This enters basic ACL
configuration mode
This defines ACL rule
This moves a rule
This binds a time range to a
rule
83