H3C S7500 Series Ethernet Switches Command Manual

Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-26
z If the rule corresponding to the specified rule ID does not exist, you will create and
define a new rule.
z The content of a modified or created rule must not be identical with the content of
any existing rule; otherwise the rule modification or creation will be failed, and the
system will prompt that the rule already exists.
If you do not specify a rule ID, you will create and define a new rule, and the system will
assign an ID for the rule automatically.
 Note:
Only non-Type-A LPUs support the user-defined ACL.
Examples
# Define a user-defined rule to forbid all TCP packets to pass through.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] time-range t1 18:00 to 23:00 sat
[H3C] acl number 5001
[H3C-acl-user-5001] rule 25 deny 06 ff 27 time-range t1
1.1.17 time-range
Syntax
time-range time-name { start-time to end-time days-of-the-week [ from start-time
start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ]
| to end-time end-date }
undo time-range { time-name [ start-time to end-time days-of-the-week [ from
start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time
end-date ] | to end-time end-date ] | all }
View
System view
Parameters
time-name: Name of a time range, up to 32 characters long, starting with an English
letter(a to z, or A to Z).
start-time: Start time of a periodic time range, in the form of hh:mm.
end-time: End time of a periodic time range, in the form of hh:mm.