C
HAPTER
13
| Security Measures
Access Control Lists
– 343 –
2. Rules within an ACL are checked in the configured order, from top to
bottom.
3. If the result of checking an IP ACL is to permit a packet, but the result
of a MAC ACL on the same packet is to deny it, the packet will be
denied (because the decision to deny a packet has a higher priority for
security reasons). A packet will also be denied if the IP ACL denies it
and the MAC ACL accepts it.
SETTING A TIME
RANGE
Use the Security > ACL (Configure Time Range) page to sets a time range
during which ACL functions are applied.
CLI REFERENCES
u "Time Range" on page 764
COMMAND USAGE
If both an absolute rule and one or more periodic rules are configured for
the same time range (i.e., named entry), that entry will only take effect if
the current time is within the absolute time range and one of the periodic
time ranges.
PARAMETERS
These parameters are displayed:
Add
u Time-Range Name – Name of a time range. (Range: 1-16 characters)
Add Rule
u Time-Range – Name of a time range.
u Mode
n
Absolute – Specifies a specific time or time range.
n
Start/End – Specifies the hours, minutes, month, day, and year
at which to start or end.
n
Periodic – Specifies a periodic interval.
n
Start/To – Specifies the days of the week, hours, and minutes
at which to start or end.
WEB INTERFACE
To configure a time range:
1. Click Security, ACL.
2. Select Configure Time Range from the Step list.
3. Select Add from the Action list.
To Next Page
Loading...
