Acl Example - Digitalchina Networks DCS-3950 series Manual

Wednesday, Friday and Sunday.
Switch(Config-Time-Range)#periodic monday wednesday friday sunday 14:30:00 to
16:45:00
15.3.2.18 absolute start
Command: [no]absolute start <start_time> <start_data> [end <end_time>
<end_data>]
Functions: Define an absolute time-range, this time-range operates subject to the clock
of this equipment.
Parameters:
start_time : start time, HH:MM:SS (hour: minute: second)
end_time :
start_data : start data, the format is, YYYY.MM.DD（year.month.day）
end_data : end data, the format is, YYYY.MM.DD（year.month.day）
Remark: time-range is one minute per time, so the time error shall be <= one minute.
Command mode: Time-range Mode
Default: No time-range configuration
Usage Guide: Absolute time and date, assign specific year, month, day, hour, minute of
the start, shall not configure multiple absolute time and date, when in repeated
configuration, the latter configuration covers the absolute time and date of the former
configuration.
Example: Make configurations effective from 6:00:00 to 13:30:00 from Oct. 1, 2004 to Jan.
26, 2005.
Switch(Config)#Time-range dcn_timer
Switch(Config-Time-Range)#absolute start 6:00:00 2004.10.1 end 13:30:00 2005.1.26

15.4 ACL Example

Scenario 1:
The user has the following configuration requirement: port 1/10 of the switch connects to
10.0.0.0/24 segment, ftp is not desired for the user.
Configuration description:
Create a proper ACL
Configuring packet filtering function
Bind the ACL to the port
The configuration steps are listed below:
Switch(Config)#access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch(Config)#firewall enable
Switch(Config)#firewall default permit
Switch(Config)#interface ethernet 0/0/10
Switch(Config-Ethernet0/0/10)#ip access-group 110 in
DCS-3950 series Ethernet switch manual
end time, HH:MM:SS (hour: minute: second)
277