Hà Nội: NTT03, Line 1, Thống Nhất Complex, 82 Nguyễn Tuân, Thanh Xuân, Hà Nội. ● HCM: Số 31B, Đường 1, Phường An Phú, Quận 2 (Thủ Đức), TP HCM. ===> Đơn Vị Hàng Đầu Trong Lĩnh Vực Cung Cấp Thiết Bị Security - Network - Wifi - CCTV - Conference - Máy chủ Server - Lưu trữ Storge.
Danh mục sản phẩm

Configure Time Domain

The time domain is the set of the time segments. One time domain can contain zero to multiple time segments. The time range of the time domain is the union of the time segments. The time domain can be bound with ACL or ACL rule, as the condition of whether ACL or ACL rule takes effect.

Configuration Condition

Before configuring the time domain function, first complete the following task:

  • Configure ACL

Configure Time Domain

Configure whether the application object of the time domain is limited by the time domain. When it is enabled, the application object is limited by the time domain. On the contrary, it is not limited by the time domain.

Table 15-18 Configure the time domain

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure disabling/enabling the time domain

set time-range { disable | enable }

Mandatory

By default, it is enabled.

Configure Periodical Time Segment

Periodical time segment: Periodical time segment means to select one day or several days from Monday to Sunday, and the start time point to the end time point as the time segment, taking effect every week repeatedly.

Table 15-19 Configure the periodical time segment

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure the time domain

time-range time-range-name

Mandatory

By default, do not configure the time domain.

Configure the periodical time segment

[ sequence ] periodic [ day-of-the-week ] [ hh: mm [ : ss ] ] to [ day-of-the-week ] [ hh: mm [ : ss ] ]

Either

By default, do not configure periodical time segment.

The former command can specify the time range as one day (such as Monday) or several days (such as Monday, Friday).

The latter command can specify the time range as every day, weekend, or workday.

[ sequence ] periodic { weekdays | weekend | daily } [ hh: mm [ : ss ] ] to [ hh: mm [ : ss ] ]

Configure Absolute Time Segment

The absolute time segment means to take effect within the specified date and time range.

Table 15-20 Configure the absolute time segment

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure the time domain

time-range time-range-name

Mandatory

By default, do not configure the time domain.

Configure the absolute time segment of the time domain

[ sequence ] absolute start hh: mm [ : ss ] [ day [ month [ year ] ] ] end hh: mm [ : ss ] [ day [ month [ year ] ] ]

Mandatory

By default, do not configure the absolute time segment of the time domain.

Configure Refresh Period

The status of time domain includes effective and ineffective. The status refresh period of the time domain is 1 minute by default. Automatically refresh according to the current system time. Therefore, when refreshing the status, there may be 0-60s delay compared with the system time.

Table 15-21 Configure the refresh period

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure the refresh period of the time domain

set time-range frequency { frequency-min | seconds frequency-sec}

Mandatory

The default value is 1 minute. The refresh period is the interval between two refreshes and the unit is minute or second.

Configure Maximum Time Offset

The maximum offset means the maximum offset between accumulation time of the counter and the system time. Once the time statistics exceeds the offset, re-judge the status of the time domain and update during the next refreshing so that the time statistics is more correct.

Table 15-22 Configure the maximum time offset

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure the maximum time offset of the time domain

set time-range max-offset max-offset-number

Mandatory

The default value is 100.

The unit of the time offset is second and the value range is 1-300.

Configure Time Domain and ACL Rule Binding

When it is necessary to control one user to access the network resources within the specified time segment, we can set the ACL rule based on the time domain to filter the packets. Whether the time domain takes effect directly affects the associated ACL rule. Table 15-23 Configure the time domain to be bound with the ACL rule

Step

Command

Description

Configure the binding with IP standard ACL rule

Refer to “Configure IP Standard ACL”

-

Configure the binding with IP extended ACL rule

Refer to “Configure IP Extended ACL”

-

Configure the binding with MAC standard ACL rule

Refer to “Configure MAC Standard ACL”

-

Configure the binding with MAC extended ACL rule

Refer to “Configure MAC Extended ACL”

-

Configure the binding with Hybrid extended ACL rule

Refer to “Configure Hybrid Extended ACL”

-

Configure the binding with IPv6 standard ACL rule

Refer to “Configure IPv6 standard ACL”

-

Configure the binding with IPv6 extended ACL rule

Refer to “Configure IPv6 extended ACL”

-

note


  • When the time domain bound with the ACL rule does not exist, the ACL rule is in the effective state.

Configure Time Domain and ACL Binding

When it is necessary to control one user to access the network resources within the specified time segment, we can set the ACL rule based on the time domain to filter the packets. Whether the time domain takes effect directly affects the rules contained in the whole ACL.

Table 15-24 Configure the time domain and ACL binding

Step

Command

Description

Enter global configuration mode

configure terminal

-

Configure the time domain to be bound with IP ACL

ip time-range time-range-name access-list { access-list-number | access-list-name }

Mandatory

By default, do not configure the time domain to be bound with IP ACL.

Configure the time domain to be bound with MAC ACL

mac time-range time-range-name access-list { access-list-number | access-list-name }

Mandatory

By default, do not configure the time domain to be bound with MAC ACL.

Configure the time domain to be bound with Hybrid ACL

hybrid time-range time-range-name access-list { access-list-number | access-list-name }

Mandatory

By default, do not configure the time domain to be bound with Hybrid ACL.

Configure the time domain to be bound with IPv6 ACL

ipv6 time-range time-range-name access-list { access-list-number | access-list-name }

Mandatory

By default, do not configure the time domain to be bound with IPv6 ACL.

note


  • When the time domain bound with the ACL rule does not exist, the ACL rule is in the effective state.