Chapter 2 Ipv4 Acl Configuration - H3C S5500-EI series Operation Manual

Operation Manual – ACL
H3C S5500-EI Series Ethernet Switches

Chapter 2 IPv4 ACL Configuration

When configuring an IPv4 ACL, go to these sections for information you are interested
in:
Creating a Time Range
Configuring a Basic IPv4 ACL
Configuring an Advanced IPv4 ACL
Configuring an Ethernet Frame Header ACL
Copying an IPv4 ACL
Displaying and Maintaining IPv4 ACLs
IPv4 ACL Configuration Example
2.1 Creating a Time Range
You can specify a time range for each rule in an ACL. A time range-based ACL takes
effect only in specified time ranges. Only after a time range is configured and the
system time is within the time range, can an ACL rule take effect.
Two types of time ranges are available:
Periodic time range, which recurs periodically on the day or days of the week.
Absolute time range, which takes effect only in a period of time and does not recur.
2.1.1 Configuration Procedure
Follow these steps to create a time range:
To do...
Enter system view
Create a time
range
Note that:
Periodic time range created using the time-range time-name start-time to
end-time days command. A time range thus created recurs periodically on the day
or days of the week.
Absolute time range created using the time-range time-name { from time1 date1
[ to time2 date2 ] | to time2 date2 } command. Unlike a periodic time range, a time
range thus created does not recur. For example, to create an absolute time range
that is active between January 1, 2004 00:00 and December 31, 2004 23:59, you
Use the command...
system-view
time-range time-name { start-time to
end-time days [ from time1 date1 ] [ to
time2 date2 ] | from time1 date1 [ to time2
date2 ] | to time2 date2 }
2-1
Chapter 2 IPv4 ACL Configuration
Remarks
––
Required