H3C Technologies H3C S3600 Series Switches - Manual (Page 709)

1-4
z Advanced ACL
z Layer 2 ACL
z User-defined ACL
z IPv6 ACL
In addition, ACLs defined on S3600 series Ethernet switches can be applied to hardware
directly or referenced by upper-layer software for packet filtering.
ACL Configuration Task List
Complete the following tasks to configure ACL:
Task Remarks
Configuring Time Range Optional
Configuring Basic ACL Required
Configuring Advanced ACL Required
Configuring Layer 2 ACL Required
Configuring User-defined ACL Required
Configuring IPv6 ACL Required
Applying ACL Rules on Ports Required
Applying ACL Rules to Ports in a VLAN Required
Configuring Time Range
Time ranges can be used to filter packets. You can specify a time range for each rule in an
ACL. A time range-based ACL takes effect only in specified time ranges. Only after a time
range is configured and the system time is within the time range, can an ACL rule take
effect.
Two types of time ranges are available:
z Periodic time range, which recurs periodically on the day or days of the week.
z Absolute time range, which takes effect only in a period of time and does not recur.
An absolute time range on an H3C S3600 Series Ethernet Switches can be within the range
1970/1/1 00:00 to 2100/12/31 24:00.
Configuration procedure
Follow these steps to configure a time range: