Filter
Top Products
Configure Firewall 557
one to use after viewing the current time range (special or normal). For example,
the current system time is in special time range (which is defined by
rule special
acl-number
), and then the special time range rules will be used for filtering. But
when the current system time is switched to the normal time range (which is
defined by
rule normal acl-number), the normal time range rules will be used
for filtering.
Perform the following configurations in system view.
Table 625 Enable/Disable Filtering According to Timerange
By default, the filtering based on time range is disabled.
Only when the switch of filtering according to time range is enabled will the
special time range access rules set by the user be effective. But when this switch is
disabled, the normal time range access rules will be applied.
Set special time range
When you enable message-filtering according to time range, the firewall adopts
user defined special time range access rules for filtering during the time range
defined by the user. The newly defined special time range becomes valid about 1
minute after it is defined, and that defined last time will become invalid
automatically.
Perform the following configurations in system view.
Table 626 Set Special Time Range
By default, the system adopts the access rules defined for normal time range for
message filtering. The command
settr can define 6 time ranges at the same time.
The format of the time range is hh:mm. The value of hh is 0 - 23 hours and the
value of mm is 0- - 59 minutes.
The command display clock can be used to view the current clock status of the
system.
Configuring Rules for
Applying Access Control
List on Interface
To apply access rules to specific interfaces to filter messages, it is necessary to
apply the access control list rules to the interfaces. Users can define different
access control rules for messages of both inbound and outbound directions at one
interface.
Perform the following configurations in interface view.
Operation Command
Enable filtering according to timerange timerange enable
Disable filtering according to timerange timerange disable
Operation Command
Set special time range settr begin-time end-time [
begin-time end-time...... ]
Cancel special time range undo settr