63
IPV4 ACL CONFIGURATION
When configuring an IPv4 ACL, go to these sections for information you are
interested in:
■ “Creating a Time Range” on page 851
■ “Configuring a Basic IPv4 ACL” on page 842
■ “Configuring an Advanced IPv4 ACL” on page 844
■ “Configuring an Ethernet Frame Header ACL” on page 845
■ “Copying an IPv4 ACL” on page 846
■ “Displaying and Maintaining IPv4 ACLs” on page 847
■ “IPv4 ACL Configuration Example” on page 847
Creating a Time Range You can specify a time range for each rule in an ACL. A time range-based ACL
takes effect only in specified time ranges. Only after a time range is configured
and the system time is within the time range, can an ACL rule take effect.
Two types of time ranges are available:
■ Periodic time range, which recurs periodically on the day or days of the week.
■ Absolute time range, which takes effect only in a period of time and does not
recur.
Configuration Procedure Follow these steps to create a time range:
n
■ Periodic time range created using the time-range time-name start-time to
end-time days command. A time range thus created recurs periodically on the
day or days of the week.
■ Absolute time range created using the time-range time-name { from time1
date1 [ to time2 date2 ] | to time2 date2 } command. Unlike a periodic time
range, a time range thus created does not recur. For example, to create an
absolute time range that is active between January 1, 2004 00:00 and
December 31, 2004 23:59, you may use the time-range test from 00:00
01/01/2004 to 23:59 12/31/2004 command.
To do… Use the command… Remarks
Enter system view system-view --
Create a time range time-range time-name { start-time to end-time
days [ from time1 date1 ] [ to time2 date2 ] |
from time1 date1 [ to time2 date2 ] | to time2
date2 }
Required
To Next Page
Loading...
