Configure Firewall 557

one to use after viewing the current time range (special or normal). For example, the current system time is in special time range (which is defined by rule special acl-number), and then the special time range rules will be used for filtering. But when the current system time is switched to the normal time range (which is defined by rule normal acl-number), the normal time range rules will be used for filtering.

Perform the following configurations in system view.

Table 625 Enable/Disable Filtering According to Timerange

Operation

Command

 

 

 

 

Enable filtering according to timerange

timerange

enable

 

 

 

Disable filtering according to timerange

timerange

disable

 

 

 

By default, the filtering based on time range is disabled.

Only when the switch of filtering according to time range is enabled will the special time range access rules set by the user be effective. But when this switch is disabled, the normal time range access rules will be applied.

Set special time range

When you enable message-filtering according to time range, the firewall adopts user defined special time range access rules for filtering during the time range defined by the user. The newly defined special time range becomes valid about 1 minute after it is defined, and that defined last time will become invalid automatically.

Perform the following configurations in system view.

Table 626 Set Special Time Range

Operation

Command

 

 

Set special time range

settr begin-time end-time [

 

begin-time end-time...... ]

 

 

Cancel special time range

undo settr

 

 

By default, the system adopts the access rules defined for normal time range for message filtering. The command settr can define 6 time ranges at the same time. The format of the time range is hh:mm. The value of hh is 0 - 23 hours and the value of mm is 0- - 59 minutes.

The command display clock can be used to view the current clock status of the system.

Configuring Rules for To apply access rules to specific interfaces to filter messages, it is necessary to Applying Access Control apply the access control list rules to the interfaces. Users can define different

List on Interface access control rules for messages of both inbound and outbound directions at one interface.

Perform the following configurations in interface view.

Page 561
Image 561
3Com 10014299 manual Set special time range, Enable/Disable Filtering According to Timerange, Set Special Time Range