Configuration examples, Configuring a basic ipv4 acl, Configuration prerequisites – H3C Technologies H3C WX6000 Series Access Controllers User Manual

Page 410: Configuration procedure

Advertising
background image

41-2

2004 23:59, you may use the time-range test 12:00 to 14:00 wednesday from 00:00 01/01/2004

to 23:59 12/31/2004

command.

z

You may create individual time ranges identified with the same name. They are regarded as one
time range whose active period is the result of ORing periodic ones, ORing absolute ones, and
ANDing periodic and absolute ones.

z

With no start time specified, the time range is from the earliest time that the system can express
(that is, 00:00 01/01/1970) to the end time. With no end time specified, the time range is from the
time the configuration takes effect to the latest time that the system can express (that is, 24:00
12/31/2100).

z

Up to 256 time ranges can be defined.

Configuration Examples

# Create a periodic time range that is active from 8:00 to 18:00 every working day.

<Sysname> system-view

[Sysname] time-range test 8:00 to 18:00 working-day

[Sysname] display time-range test

Current time is 22:17:42 1/5/2006 Thursday

Time-range : test ( Inactive )

08:00 to 18:00 working-day

# Create an absolute time range from 15:00, Jan 28, 2006 to 15:00, Jan 28, 2008.

<Sysname> system-view

[Sysname] time-range test from 15:00 1/28/2006 to 15:00 1/28/2008

[Sysname] display time-range test

Current time is 22:20:18 1/5/2006 Thursday

Time-range : test ( Inactive )

from 15:00 1/28/2006 to 15:00 1/28/2008

Configuring a Basic IPv4 ACL

Basic IPv4 ACLs filter packets based on source IP address. They are numbered in the range 2000 to
2999.

Configuration Prerequisites

If you want to reference a time range to a rule, define it with the time-range command first.

Configuration Procedure

Follow these steps to configure a basic IPv4 ACL:

To do…

Use the command…

Remarks

Enter system view

system-view

––

Create and enter
basic IPv4 ACL
view

acl number

acl-number

[ name acl-name ]
[ match-order { auto |
config

} ]

Required
The default match order is config.
If you specify a name for an IPv4 ACL when creating the
ACL, you can use the acl name acl-name command to
enter the view of the ACL later.

Advertising