2-1
2
ACL Configuration
When configuring an ACL, go to these sections for information you are interested in:
z
Creating a Time Range
z
Configuring a Basic ACL
z
Configuring an Advanced ACL
z
Configuring an Ethernet Frame Header ACL
z
Copying an ACL
z
Displaying and Maintaining ACLs
Creating a Time Range
Two types of time ranges are available:
z
Periodic time range, which recurs periodically on the day or days of the week.
z
Absolute time range, which takes effect only in a period of time and does not recur.
Configuration Procedure
Follow these steps to create a time range:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create a time range
time-range
time-range-name
{
start-time
to
end-time
days
[
from time1 date1
] [
to time2
date2
] |
from time1 date1
[
to
time2 date2
] |
to time2 date2
}
Required
Display the configuration and
status of one or all time ranges
display
time-range
{
time-range-name
|
all
}
Optional
Available in any view
You may create a maximum of 256 time ranges.
A time range can be one of the following:
z
Periodic time range created using the
time-range
time-range-name
start-time
to
end-time
days
command. A time range thus created recurs periodically on the day or days of the week. A periodic
time range is active only when the system time falls within it.
z
Absolute time range created using the
time-range
time-range-name
{
from time1 date1
[
to time2
date2
] |
to time2 date2
} command. Unlike a periodic time range, a time range thus created does
not recur. For example, to create an absolute time range that is active between January 1, 2004
00:00 and December 31, 2004 23:59, you may use the
time-range test from 00:00 01/01/2004 to
23:59 12/31/2004
command.
z
Compound time range created using the
time-range
time-range-name
start-time
to
end-time
days
{
from time1 date1
[
to time2 date2
] |
to time2 date2
} command. A time range thus created recurs
on the day or days of the week only within the specified period. For example, to create a time range
