Operation Manual – ACL
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
1-4
If only a periodic time section is defined in a time range, the time range is active only
when the system time within the defined periodic time section. If multiple periodic time
sections are defined in a time range, the time range is active only when the system time
is within one of the periodic time sections.
If only an absolute time section is defined in a time range, the time range is active only
when the system time within the defined absolute time section. If multiple absolute time
sections are defined in a time range, the time range is active only when the system time
is within one of the absolute time sections.
If both a periodic time section and an absolute time section are defined in a time range,
the time range is active only when the periodic time range and the absolute time range
are both matched. Assume that a time range contains an absolute time section ranging
from 00:00 January 1, 2004 to 23:59 December 31, 2004, and a periodic time section
ranging from 12:00 to 14:00 on every Wednesday. This time range is active only when
the system time within the range from 12:00 to 14:00 on every Wednesday in 2004.
If the start time is not specified, the time section starts on the earliest date available in
the system and ends on the specified end date. If the end date is not specified, the time
section starts from the specified start date to 2100/12/31 23:59.
1.2.2 Configuration Example
# Define a periodic time range that will be active from 8:00 to 18:00 on Monday through
Friday.
<H3C> system-view
[H3C] time-range test 8:00 to 18:00 working-day
[H3C] display time-range test
Current time is 13:27:32 4/16/2005 Saturday
Time-range : test ( Inactive )
08:00 to 18:00 working-day
# Define an absolute time range from 15:00 1/28/2000 to 15:00 1/28/2004.
<H3C> system-view
[H3C] time-range test from 15:00 1/28/2000 to 15:00 1/28/2004
[H3C] display time-range test
Current time is 13:30:32 4/16/2005 Saturday
Time-range : test ( Inactive )
From 15:00 Jan/28/2000 to 15:00 Jan/28/2004
1.3 Basic ACL Configuration
A basic ACL filters packets based on their Layer 3 source IP addresses.