2-1
2 IPv4 ACL Configuration
When configuring an IPv4 ACL, go to these sections for information you are interested in:
z Creating a Time Range
z Configuring a Basic IPv4 ACL
z Configuring an Advanced IPv4 ACL
z Configuring an Ethernet Frame Header ACL
z Copying an IPv4 ACL
z Displaying and Maintaining IPv4 ACLs
z IPv4 ACL Configuration Example
Creating a Time Range
Two types of time ranges are available:
z Periodic time range, which recurs periodically on the day or days of the week.
z Absolute time range, which takes effect only in a period of time and does not recur.
Configuration Procedure
Follow these steps to create a time range:
To do… Use the command… Remarks
Enter system view
system-view
––
Create a time range
time-range time-range-name
{ start-time to end-time days [ from
time1 date1 ] [ to time2 date2 ] | from
time1 date1 [ to time2 date2 ] | to
time2 date2 }
Required
Display the configuration
and status of one or all time
ranges
display time-range
{ time-range-name | all }
Optional
Available in any view
You may create a maximum of 256 time ranges.
A time range can be one of the following:
z Periodic time range created using the time-range time-range-name start-time to end-time days
command. A time range thus created recurs periodically on the day or days of the week. A periodic
time range is active only when the system time falls within it.
z Absolute time range created using the time-range time-range-name { from time1 date1 [ to time2
date2 ] | to time2 date2 } command. Unlike a periodic time range, a time range thus created does
not recur. For example, to create an absolute time range that is active between January 1, 2004
00:00 and December 31, 2004 23:59, you may use the time-range test from 00:00 01/01/2004 to
23:59 12/31/2004 command.
z Compound time range created using the time-range time-range-name start-time to end-time days
{ from time1 date1 [ to time2 date2 ] | to time2 date2 } command. A time range thus created recurs
To Next Page
Loading...
Need help?
General