3Com 8807 - Page 170

170 CHAPTER 21: ACL CONFIGURATION
The following table describes the configuration tasks for service processor cards.
Configuring Time Range You may set such items in time range configuration: The defined time range
includes absolute time range and periodic time range. The absolute time range is
in the form of hh:mm YYYY/MM/DD; the periodic time range is in the format of
hh:mm, day.
Perform the following configurations in system view.
Activate the ACL packet-filter inbound Required
Tabl e 146 ACL configuration tasks for service processor cards
Item Command Description
Enter system view system-view -
Configure the time range
time-range time-name {
start-time to end-time
days-of-the-week [ from
start-time start-date ] [ to
end-time end-date ] | from
start-time start-date [ to
end-time end-date ] | to
end-time end-date }
Optional
Enter ACL view
acl { number acl-number |
name acl-name [ advanced |
basic ] } [ match-order {
config | auto } ]
Required. Service processor
cards do not support Layer 2
ACL.
Define rules rule Required
Exit ACL view quit -
Enter Ethernet port view
interface interface-type
interface-number
-
Configure traffic redirection in
Ethernet port view to redirect
the packets of a specific VLAN
to a service processor card
traffic-redirect inbound
ip-group
Required. See section
“Configuring Traffic
Redirection” “Configuring
Traffic Redirection”
Exit Ethernet port view quit -
Enter VLAN view vlan vlan-id
You must enter the VLAN
view specified by the
redirection function.
Activate the ACL in VLAN
view
packet-filter inbound
ip-group { acl-number |
acl-name } [ rule rule [
system-index index ] ] slot
slotid
Required
Table 145 ACL configuration tasks on interface cards
Item Command Description
Tabl e 147 Configure/Delete time range
Operation Command
Create time range
time-range time-name { start-time to end-time days-of-the-week [
from start-time start-date ] [ to end-time end-date ] | from start-time
start-date [ to end-time end-date ] | to end-time end-date }