Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 3 Access Control List Configuration
Commands
3Com Corporation
3-7
[3Com] acl number 3001
[3Com-acl-adv-3001] rule deny udp destination-port eq rip
# Add a rule to permit hosts in the network segment 129.9.0.0 to send WWW packet to
hosts in the network segment 202.38.160.0.
[3Com-acl-adv-3001] rule permit tcp source 129.9.0.0 0.0.255.255 destination
202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to deny the WWW access (80) from the host in network segment 129.9.0.0
to the host in network segment 202.38.160.0, and log events that violate the rule.
[3Com-acl-adv-3001] rule deny tcp source 129.9.0.0 0.0.255.255 destination
202.38.160. 0 0.0.0.255 eq www logging
# Add a rule to permit the WWW access (80) from the host in network segment
129.9.8.0 to the host in network segment 202.38.160.0.
[3Com-acl-adv-3001] rule permit tcp source 129.9.8.0 0.0.0.255 destination
202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to prohibit all hosts from establishing Telnet (23) connection to the host
with the IP address 202.38.160.1.
[3Com-acl-adv-3001] rule deny tcp destination 202.38.160.1 0 destination-port
eq telnet
# Add a rule to prohibit create UDP connections with port number greater than 128 from
the hosts in network segment 129.9.8.0 to the hosts in network segment 202.38.160.0
[3Com-acl-adv-3001] rule deny udp source 129.9.8.0 0.0.0.255 destination
202.38.160.0 0.0.0.255 destination-port gt 128
# Add a rule, denying the packets carrying the source address 1.1.1.1 from VPN vrf1.
[3Com-acl-adv-3001] rule deny ip source 1.1.1.1 vpn-instance vrf1
3.2 Time-range Configuration Commands
3.2.1 display time-range
Syntax
display time-range { all | time-name }
View
Any view
Parameter
time-name: Name of the time range.
all: Displays all the configured time ranges.