Configure ACL validity time range on S series switch

Publication Date:  2016-11-21 Views:  189 Downloads:  0
Issue Description
Configure ACL validity time range on S series switch.
Solution
An S series switch, except S1700, supports two types of validity time of ACL rules:

1. Periodic time range: defines a time range based on weeks. The associated ACL rules take effect at an interval of one week. For example, if the time range of ACL rules is 8:00-12:00 on Monday, the ACL rules take effect at 8:00-12:00 on every Monday.
Format: time-range time-name start-time to end-time { days } &<1-7>

2. Absolute time range: defines a time range from YYYY/MM/DD hh:mm to YYYY/MM/DD hh:mm. The associated ACL rules take effect only in this period.
Format: time-range time-name from time1 date1 [ to time2 date2 ]
Create a time range working-time (8:00-18:00 from Monday to Friday) and configure a rule in ACL work-acl. The rule rejects the packets from network segment 192.168.1.0/24 within the period working-time.
[HUAWEI] time-range working-time 8:00 to 18:00 working-day
[HUAWEI] acl name work-acl basic
[HUAWEI-acl-basic-work-acl] rule deny source 192.168.1.0 0.0.0.255 time-range working-time

END