3Com Switch 7700, Configuration Manual

Page: 241 / 390

Configuring ACLs 233
Configuring ACLs
ACL configuration includes the tasks described in the following sections:
■
Configuring the Time Range
■
Selecting the ACL Mode
■
Defining an ACL
■
Activating an ACL
Configure the time range first, then define the ACL (using the defined time range
in the definition), followed by activating the ACL to validate it. These steps must
be done in sequence.
Configuring the Time
Range
The process of configuring a time-range includes the steps of configuring the
hour-minute range, date range, and period range. The hour-minute range is
expressed in the units of minutes and hour. The date range is expressed in the
units of date, month, and year. The periodic time range is expressed by the day of
the week.
You can use the following command to set the time range by performing the
following configuration in the system view.
When the start-time and end-time are not configured, they are set to define one
day. The end time must be later than the start time.
When the end-time end-date is not configured, it will be all the time from now to
the date, which can be displayed by the system. The end time must be later than
the start time.
Selecting the ACL Mode The Switch 7700 can only have one of two modes, ip-based or link-based . In
either mode, only L2 ACLs can be defined, activated, and cited by other
applications.
You can use the following command to configure a traffic classification rule in
ip-based or link-based mode.
Perform the following configuration in system view.
By default, the Switch 7700 uses ip-based mode and the L3 traffic classification
rule.
Table 2 Set the Absolute Time Range
Operation Command
Set the absolute time range time-range time-name { start-time to
end-time days-of-the-week | from start-time
start- date | to end-time end-date ]
Delete the absolute time range undo time-range time-name [ start-time to
end-time days-of-the-week ] [ from start-time
start- date ] [ to end time end-date ]
Table 3 Select ACL Mode
Operation Command
Select ACL mode acl mode { ip-based | link-based
}