АМАТЕК AN-SGM28P24-400 [229/322] Acl based on time interval

228 / 322

3) host A.B.C.D Amount to A.B.C.D 0.0.0.0

ARP rule：The ARP group can control the type of operation of the ARP packet, the sender

MAC and the sender IP。

Command form：access-list <groupid> {deny | permit} arp <sender-mac> <sender-ip>

Parameter description：

groupId：The access control list number, the extended IP ACL support group from 1100 to

1199。

deny/permit：If the match is complete, the packet is rejected or allowed to be forwarded。

sender-mac：The MAC address of the sender of the ARP packet。

The MAC address has three input modes：

1)HHHH.HHHH.HHHH wildcard You can control the MAC address from a segment；

2)any Amount to HHHH.HHHH.HHHH FFFF.FFFF.FFFF

3)host A.B.C.D Amount to HHHH.HHHH.HHHH 0000.0000.0000

sender-ip：Sender IP address of ARP packet。

The IP address has three input modes：

1) A.B.C.D wildcard You can control the IP address from a network segment；

2) any Amount to A.B.C.D 255.255.255.255

3) host A.B.C.D Amount to A.B.C.D 0.0.0.0

Other commands list：

show access-list [groupId]

Displays a list of rules configured in the current ACL. If groupId is entered, the list of rules

for the current group is shown; otherwise, all the list of rules are displayed。

no access-list <groupId>

Deletes the specified rule list. All rules of group groupId。

17.4 ACL based on time interval

The time section is used to describe a particular time range. Users may have the needs: some

ACL rules need to be effective within a certain period of time, and they do not use packet filtering

in other time periods, which is usually referred to as filtering in the time period. At this time, the

user can first configure one or more time, then time name refers to the time period in the

corresponding rule, this rule is effective only in the time period specified, so as to realize the ACL