Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
Huawei Technologies Proprietary
1-3
z If the number and type of ACEs are the same for multiple rules, then the sum of
ACE values of a rule determines its priority. The smaller the sum, the higher the
priority.
1.1.3 ACLs Based on Time Ranges
A time range-based ACL enables you to implement ACL control over packets by
differentiating the time ranges.
A time range can be specified in each rule in an ACL. If the time range specified in a
rule is not configured, the system will give a prompt message and allow such a rule to
be successfully created. However, the rule does not take effect immediately. It takes
effect only when the specified time range is configured and the system time is within the
time range. If you remove the time range of an ACL rule, the ACL rule becomes invalid
the next time the ACL rule timer refreshes.
1.1.4 Types of ACLs Supported by the Ethernet Switch
The following types of ACLs are supported by the Ethernet switch:
z Basic ACL
z Advanced ACL
z Layer 2 ACL
z User-defined ACL
1.2 Configuring Time Ranges
A number of time sections can be configured under the same time range name, and
there is an “OR” relationship among these sections.
The time range configuration tasks include configuring periodic time sections and
configuring absolute time sections. A periodic time section appears as a period of time
in a day of the week, while an absolute time section appears in the form of “the start
time to the end time”.
1.2.1 Configuration Procedure
Table 1-1 Configure a time range
Operation Command Description
Enter system view
system-view
—
To Next Page
Loading...
Need help?
General