H3C S3100 Series, Operation Manual

Page: 562 / 1057

1-5
Time-range : test ( Inactive )
08:00 to 18:00 working-day
# Define an absolute time range spans from 15:00 1/28/2006 to 15:00 1/28/2008.
<Sysname> system-view
[Sysname] time-range test from 15:00 1/28/2006 to 15:00 1/28/2008
[Sysname] display time-range test
Current time is 13:30:32 Apr/16/2005 Saturday
Time-range : test ( Inactive )
From 15:00 Jan/28/2000 to 15:00 Jan/28/2004
Configuring Basic ACL
A basic ACL filters packets based on their source IP addresses.
A basic ACL can be numbered from 2000 to 2999.
Configuration prerequisites
z
To configure a time range-based basic ACL rule, you need to create the corresponding time range
first. For information about time range configuration, refer to section Configuring Time Range .
z
The source IP addresses based on which the ACL filters packets are determined.
Configuration procedure
Table 1-2 Define a basic ACL rule
Operation Command Description
Enter system view system-view —
Create an ACL and
enter basic ACL view acl number acl-number [ match-order
{ auto | config } ]
Required
config by default
Define an ACL rule
rule [ rule-id ] { deny | permit }
[ rule-string ]
Required
For information about
rule-string , refer to ACL
Command .
Configure a description
string to the ACL
description text
Optional
Not configured by default
Note that:
z
With the config match order specified for the basic ACL, you can modify any existent rule. The
unmodified part of the rule remains. With the auto match order specified for the basic ACL, you
cannot modify any existent rule; otherwise the system prompts error information.
z
If you do not specify the rule-id argument when creating an ACL rule, the rule will be numbered
automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the number of the rule will
be the greatest rule number plus one. If the current greatest rule number is 65534, however, the
system will display an error message and you need to specify a number for the rule.
z
The content of a modified or created rule cannot be identical with that of any existing rule of the
ACL; otherwise the rule modification or creation will fail, and the system will prompt that the rule
already exists.