Configuring ACLs 151

Configuring ACLs

ACL configuration includes the tasks described in the following sections:

 

Configuring the Time Range

 

 

Selecting the ACL Mode

 

 

Defining an ACL

 

 

Activating an ACL

 

 

Configure the time range first, then define the ACL (using the defined time range

 

in the definition), followed by activating the ACL to validate it. These steps must

 

be done in sequence.

 

Configuring the Time

The process of configuring a time-range includes configuring the hour-minute

Range

range, date range, and period range. The hour-minute range is expressed in the

 

units of minutes and hour. The date range is expressed in the units of date, month,

 

and year. The periodic time range is expressed by the day of the week.

 

Use the following command to set the time range in system view.

 

Table 162 Set the Absolute Time Range

 

 

 

 

 

Operation

Command

 

 

 

 

Set the absolute time range

time-rangetime-name { start-time to

 

 

 

end-time days-of-the-week from start-time

 

 

 

start- date to end-time end-date ]

 

Delete the absolute time range

undo time-rangetime-name [ start-time to

 

 

 

end-time days-of-the-week ] [ from start-time

 

 

 

start- date] [to end time end-date ]

 

 

 

 

When the start-timeand end-timeare not configured, they are set to define one day. The end time must be later than the start time.

When the end-timeend-dateis not configured, it will be all the time from now to the latest date that can be displayed by the system. The end time must be later than the start time.

Selecting the ACL Mode The Switch 7750 can only have one of two modes, ip-basedor link-based. In either mode, only L2 ACLs can be defined, activated, and cited by other applications.

You can use the following command to configure a traffic classification rule in ip-basedor link-basedmode.

Perform the following configuration in system view.

Table 163 Select ACL Mode

Operation

Command

 

 

Select ACL mode

acl mode { ip-based link-based }

 

 

By default, the Switch 7750 uses ip-basedmode and the L3 traffic classification rule.

Defining an ACL The Switch 7750 supports several kinds of ACLs.

Page 151
Image 151
3Com 10014298 manual Configuring ACLs, Be done in sequence, Configuring the Time, Range