H3C S5120-SI Series

2-2
that is active from 12:00 to 14:00 on Wednesdays between January 1, 2004 00:00 and December
31, 2004 23:59, you may use the time-range test 12:00 to 14:00 wednesday from 00:00
01/01/2004 to 23:59 12/31/2004 command.
You may create individual time ranges identified with the same name. They are regarded as one time
range whose active period is the result of ORing periodic ones, ORing absolute ones, and ANDing
periodic and absolute ones.
If you do not specify the start time and date, the time range starts from the earliest time that the system
supports, namely 00:00 01/01/1970. If you do not specify the end time and date, the time range ends at
the latest time that the system supports, namely 24:00 12/31/2100.
Configuring a Basic ACL
Basic ACLs match packets based on only source IP address. They are numbered from 2000 to 2999.
Configuration Prerequisites
If you want to reference a time range in a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure a basic ACL:
To do… Use the command… Remarks
Enter system view
system-view
––
Create a basic ACL and enter
its view
acl number acl-number [ name
acl-name ] [ match-order
{ auto | config } ]
Required
The default match order is
config.
If you specify a name for an
ACL when creating the ACL,
you can use the acl name
acl-name command to enter
the view of the ACL later.
Create or modify a rule
rule [ rule-id ] { deny | permit }
[ fragment | logging | source
{ sour-addr sour-wildcard |
any } | time-range
time-range-name ] *
Required
To create or modify multiple
rules, repeat this step.
The logging keyword takes
effect only when the module
using the ACL supports
logging.
Set the rule numbering step
step step-value
Optional
5 by default
Configure a description for the
basic ACL
description text
Optional
By default, a basic ACL has no
ACL description.
Configure a rule description
rule rule-id comment text
Optional
By default, an ACL rule has no
rule description.
Note that: