842 CHAPTER 63: IPV4 ACL CONFIGURATION
■ Compound time range created using the time-range time-name start-time to
end-time days { from time1 date1 [ to time2 date2 ] | to time2 date2 }
command. A time range thus created recurs on the day or days of the week
only within the specified period. For example, to create a time range that is
active from 12:00 to 14:00 on Wednesdays between January 1, 2004 00:00
and December 31, 2004 23:59, you may use the time-range test 12:00 to
14:00 wednesday from 00:00 01/01/2004 to 23:59 12/31/2004 command.
■ You may create individual time ranges identified with the same name. They are
regarded as one time range whose active period is the result of ORing periodic
ones, ORing absolute ones, and ANDing periodic and absolute ones.
■ With no start time specified, the time range is from the earliest time that the
system can express (that is, 00:00 01/01/1970) to the end time. With no end
time specified, the time range is from the time the configuration takes effect to
the latest time that the system can express (that is, 24:00 12/31/2100).
■ Up to 256 time ranges can be defined.
Configuration Examples # Create a periodic time range that is active from 8:00 to 18:00 every working day.
<Sysname> system-view
[Sysname] time-range test 8:00 to 18:00 working-day
[Sysname] display time-range test
Current time is 22:17:42 1/5/2006 Thursday
Time-range : test ( Inactive )
08:00 to 18:00 working-day
# Create an absolute time range from 15:00, Jan 28, 2006 to 15:00, Jan 28, 2008.
<Sysname> system-view
[Sysname] time-range test from 15:00 1/28/2006 to 15:00 1/28/2008
[Sysname] display time-range test
Current time is 22:20:18 1/5/2006 Thursday
Time-range : test ( Inactive )
from 15:00 1/28/2006 to 15:00 1/28/2008
Configuring a Basic
IPv4 ACL
Basic IPv4 ACLs filter packets based on source IP address. They are numbered in
the range 2000 to 2999.
Configuration
Prerequisites
If you want to reference a time range to a rule, define it with the time-range
command first.
Configuration Procedure Follow these steps to configure a basic IPv4 ACL:
To do… Use the command… Remarks
Enter system view system-view --
To Next Page
Loading...
