Filter
Top Products
Configuring ACLs 151
Configuring ACLs ACL configuration includes the tasks described in the following sections:
■ Configuring the Time Range
■ Selecting the ACL Mode
■ Defining an ACL
■ Activating an ACL
Configure the time range first, then define the ACL (using the defined time range
in the definition), followed by activating the ACL to validate it. These steps must
be done in sequence.
Configuring the Time
Range
The process of configuring a time-range includes configuring the hour-minute
range, date range, and period range. The hour-minute range is expressed in the
units of minutes and hour. The date range is expressed in the units of date, month,
and year. The periodic time range is expressed by the day of the week.
Use the following command to set the time range in system view.
When the start-time and end-time are not configured, they are set to define one
day. The end time must be later than the start time.
When the end-time end-date is not configured, it will be all the time from now to
the latest date that can be displayed by the system. The end time must be later
than the start time.
Selecting the ACL Mode The Switch 7750 can only have one of two modes, ip-based or link-based. In
either mode, only L2 ACLs can be defined, activated, and cited by other
applications.
You can use the following command to configure a traffic classification rule in
ip-based or link-based mode.
Perform the following configuration in system view.
By default, the Switch 7750 uses ip-based mode and the L3 traffic classification
rule.
Defining an ACL The Switch 7750 supports several kinds of ACLs.
Table 162 Set the Absolute Time Range
Operation Command
Set the absolute time range time-range time-name { start-time to
end-time days-of-the-week | from start-time
start- date | to end-time end-date ]
Delete the absolute time range undo time-range time-name [ start-time to
end-time days-of-the-week ] [ from start-time
start- date] [to end time end-date ]
Table 163 Select ACL Mode
Operation Command
Select ACL mode acl mode { ip-based | link-based }