Configuration examples, Configuring a basic ipv4 acl, Configuration prerequisites – H3C Technologies H3C WX6000 Series Access Controllers User Manual
Page 410: Configuration procedure
41-2
2004 23:59, you may use the time-range test 12:00 to 14:00 wednesday from 00:00 01/01/2004
to 23:59 12/31/2004
command.
z
You may create individual time ranges identified with the same name. They are regarded as one
time range whose active period is the result of ORing periodic ones, ORing absolute ones, and
ANDing periodic and absolute ones.
z
With no start time specified, the time range is from the earliest time that the system can express
(that is, 00:00 01/01/1970) to the end time. With no end time specified, the time range is from the
time the configuration takes effect to the latest time that the system can express (that is, 24:00
12/31/2100).
z
Up to 256 time ranges can be defined.
Configuration Examples
# Create a periodic time range that is active from 8:00 to 18:00 every working day.
[Sysname] time-range test 8:00 to 18:00 working-day
[Sysname] display time-range test
Current time is 22:17:42 1/5/2006 Thursday
Time-range : test ( Inactive )
08:00 to 18:00 working-day
# Create an absolute time range from 15:00, Jan 28, 2006 to 15:00, Jan 28, 2008.
[Sysname] time-range test from 15:00 1/28/2006 to 15:00 1/28/2008
[Sysname] display time-range test
Current time is 22:20:18 1/5/2006 Thursday
Time-range : test ( Inactive )
from 15:00 1/28/2006 to 15:00 1/28/2008
Configuring a Basic IPv4 ACL
Basic IPv4 ACLs filter packets based on source IP address. They are numbered in the range 2000 to
2999.
Configuration Prerequisites
If you want to reference a time range to a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure a basic IPv4 ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create and enter
basic IPv4 ACL
view
acl number
acl-number
[ name acl-name ]
[ match-order { auto |
config
} ]
Required
The default match order is config.
If you specify a name for an IPv4 ACL when creating the
ACL, you can use the acl name acl-name command to
enter the view of the ACL later.