1-3
z
When an ACL is directly applied to hardware for packet filtering, the switch will permit packets if the
packets do not match the ACL.
z
When an ACL is referenced by upper-layer software to control Telnet, SNMP and Web login users,
the switch will deny packets if the packets do not match the ACL.
Types of ACLs Supported by Switch 4210 Series
Switch 4210 Series support the following types of ACLs.
z
Basic ACLs
z
Advanced ACLs
z
Layer 2 ACLs
Note that ACLs defined on Switch 4210 Series can be applied to hardware directly or referenced by
upper-layer software for packet filtering.
ACL Configuration
Configuring Time Range
Time ranges can be used to filter packets. You can specify a time range for each rule in an ACL. A time
range-based ACL takes effect only in specified time ranges. Only after a time range is configured and
the system time is within the time range, can an ACL rule take effect.
Two types of time ranges are available:
z
Periodic time range, which recurs periodically on the day or days of the week.
z
Absolute time range, which takes effect only in a period of time and does not recur.
An absolute time range on Switch 4210 Series can be within the range 1970/1/1 00:00 to 2100/12/31
24:00.
Configuration Procedure
Table 1-1
Configure a time range
Operation
Command
Description
Enter system view
system-view
—
Create a time range
time-range time-name
{
start-time to end-time
days-of-the-week
[
from
start-time start-date
] [
to
end-time end-date
] |
from
start-time start-date
[
to
end-time end-date
] |
to
end-time end-date
}
Required
