Operation Manual – ACL
H3C S3100 Series Ethernet Switches
Chapter 1 ACL Configuration
1-4
1.2 ACL Configuration
1.2.1 Configuring Time Range
Time ranges can be used to filter packets. You can specify a time range for each rule in
an ACL. A time range-based ACL takes effect only in specified time ranges. Only after a
time range is configured and the system time is within the time range, can an ACL rule
take effect.
Two types of time ranges are available:
z
Periodic time range, which recurs periodically on the day or days of the week.
z
Absolute time range, which takes effect only in a period of time and does not recur.
Note:
An absolute time range on an H3C S3100 Series Ethernet Switches can be within the
range 1970/1/1 00:00 to 2100/12/31 24:00.
I. Configuration Procedure
Table 1-1
Configure a time range
Operation
Command
Description
Enter system view
system-view
—
Create a time
range
time-range time-name
{
start-time to
end-time
days-of-the-week
[
from
start-time start-date
] [
to
end-time
end-date
] |
from
start-time start-date
[
to
end-time end-date
] |
to
end-time
end-date
}
Required
Note that:
z
If only a periodic time section is defined in a time range, the time range is active
only when the system time is within the defined periodic time section. If multiple
periodic time sections are defined in a time range, the time range is active only
when the system time is within one of the periodic time sections.
z
If only an absolute time section is defined in a time range, the time range is active
only when the system time is within the defined absolute time section. If multiple
absolute time sections are defined in a time range, the time range is active only
when the system time is within one of the absolute time sections.
z
If both a periodic time section and an absolute time section are defined in a time
range, the time range is active only when the periodic time range and the absolute
time range are both matched. Assume that a time range contains an absolute time
