3Com Switch 4210 9-Port, Configuration Manual

Page: 295 / 567

ACL Configuration 293
■
auto , where the rules in an ACL are matched in the order determined by the
system, namely the "depth-first" order.
When applying an ACL in this way, you can specify the order in which the rules in
the ACL are matched. The match order cannot be modified once it is determined,
unless you delete all the rules in the ACL and define the match order.
An ACL can be referenced by upper-layer software:
■
Referenced by routing policies
■
Used to control Telnet, SNMP and Web login users
n
When an ACL is referenced by upper-layer software to control Telnet, SNMP and
Web login users, the switch will deny packets if the packets do not match the ACL.
Types of ACLs Supported
by Switch 4210 Family
The Switch 4210 supports the following ACL types:
■
Basic ACLs
■
Advanced ACLs
n
ACLs defined on the Switch 4210 can be referenced by upper-layer software for
packet filtering. They cannot be applied to hardware
ACL Configuration
Configuring a Time
Range
Time ranges can be used to filter packets. You can specify a time range for each
rule in an ACL. A time range-based ACL takes effect only in specified time ranges.
Only after a time range is configured and the system time is within the time range,
can an ACL rule take effect.
Two types of time ranges are available:
■
Periodic time range, which recurs periodically on the day or days of the week.
■
Absolute time range, which takes effect only in a period of time and does not
recur.
n
An absolute time range on the Switch 4210 Family can be within the range
1970/1/1 00:00 to 2100/12/31 24:00.
Configuration Procedure
Table 216 Configure a time range
Operation Command Description
Enter system view system-view -
Create a time range time-range time-name {
start-time to end-time
days-of-the-week [ from
start-time start-date ] [ to
end-time end-date ] | from
start-time start-date [ to
end-time end-date ] | to
end-time end-date }
Required