The ACE numbers are as follows after ip access-list resequence tst_acl 100 3 is run:
DGS-3610(config)# ip access-list resequence tst_acl 100 3
ace1: 100
ace2: 103
ace3: 106
When adding ace4 without entering sn-num, the numbers are as follows:
DGS-3610(config-std-nacl)# permit …
ace1: 100
ace2: 103
ace3: 106
ace4: 109
When adding ace5 by entering seq-num = 105, the numbers are as follows:
DGS-3610(config-std-nacl)# 105 permit …
ace1: 100
ace2: 103
ace5: 105
ace3: 106
ace4: 109
The reference of the numbers is to implement the priority adding ace mode in step 4.
Delete ACE
DGS-3610(config-std-nacl)# no 106
ace1: 100
ace2: 103
ace5: 105
ace4: 109
The above numbers can also facilitate deleting ACE.
44.9 Configuring ACL Based on
Time-range
You can run the ACLs based on time, for example, make the ACL take effect during certain
periods in a week. For this purpose, you must first set a time-range.
time-range implementation depends on the system clock. If you want to use this function,
you must assure that the system has a reliable clock.
In the privileged configuration mode, you can create a time-range through the following
steps: