The time domain is the set of the time segments. One time domain can contain zero to multiple time segments. The time range of the time domain is the union of the time segments. The time domain can be bound with ACL or ACL rule, as the condition of whether ACL or ACL rule takes effect.
Configuration Condition
Before configuring the time domain function, first complete the following task:
Configure Time Domain
Configure whether the application object of the time domain is limited by the time domain. When it is enabled, the application object is limited by the time domain. On the contrary, it is not limited by the time domain.
Table 15-18 Configure the time domain
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure disabling/enabling the time domain
|
set time-range { disable | enable }
|
Mandatory
By default, it is enabled.
|
Configure Periodical Time Segment
Periodical time segment: Periodical time segment means to select one day or several days from Monday to Sunday, and the start time point to the end time point as the time segment, taking effect every week repeatedly.
Table 15-19 Configure the periodical time segment
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure the time domain
|
time-range time-range-name
|
Mandatory
By default, do not configure the time domain.
|
|
Configure the periodical time segment
|
[ sequence ] periodic [ day-of-the-week ] [ hh: mm [ : ss ] ] to [ day-of-the-week ] [ hh: mm [ : ss ] ]
|
Either
By default, do not configure periodical time segment.
The former command can specify the time range as one day (such as Monday) or several days (such as Monday, Friday).
The latter command can specify the time range as every day, weekend, or workday.
|
|
[ sequence ] periodic { weekdays | weekend | daily } [ hh: mm [ : ss ] ] to [ hh: mm [ : ss ] ]
|
Configure Absolute Time Segment
The absolute time segment means to take effect within the specified date and time range.
Table 15-20 Configure the absolute time segment
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure the time domain
|
time-range time-range-name
|
Mandatory
By default, do not configure the time domain.
|
|
Configure the absolute time segment of the time domain
|
[ sequence ] absolute start hh: mm [ : ss ] [ day [ month [ year ] ] ] end hh: mm [ : ss ] [ day [ month [ year ] ] ]
|
Mandatory
By default, do not configure the absolute time segment of the time domain.
|
Configure Refresh Period
The status of time domain includes effective and ineffective. The status refresh period of the time domain is 1 minute by default. Automatically refresh according to the current system time. Therefore, when refreshing the status, there may be 0-60s delay compared with the system time.
Table 15-21 Configure the refresh period
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure the refresh period of the time domain
|
set time-range frequency { frequency-min | seconds frequency-sec}
|
Mandatory
The default value is 1 minute. The refresh period is the interval between two refreshes and the unit is minute or second.
|
Configure Maximum Time Offset
The maximum offset means the maximum offset between accumulation time of the counter and the system time. Once the time statistics exceeds the offset, re-judge the status of the time domain and update during the next refreshing so that the time statistics is more correct.
Table 15-22 Configure the maximum time offset
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure the maximum time offset of the time domain
|
set time-range max-offset max-offset-number
|
Mandatory
The default value is 100.
The unit of the time offset is second and the value range is 1-300.
|
Configure Time Domain and ACL Rule Binding
When it is necessary to control one user to access the network resources within the specified time segment, we can set the ACL rule based on the time domain to filter the packets. Whether the time domain takes effect directly affects the associated ACL rule. Table 15-23 Configure the time domain to be bound with the ACL rule
|
Step
|
Command
|
Description
|
|
Configure the binding with IP standard ACL rule
|
Refer to “Configure IP Standard ACL”
|
-
|
|
Configure the binding with IP extended ACL rule
|
Refer to “Configure IP Extended ACL”
|
-
|
|
Configure the binding with MAC standard ACL rule
|
Refer to “Configure MAC Standard ACL”
|
-
|
|
Configure the binding with MAC extended ACL rule
|
Refer to “Configure MAC Extended ACL”
|
-
|
|
Configure the binding with Hybrid extended ACL rule
|
Refer to “Configure Hybrid Extended ACL”
|
-
|
|
Configure the binding with IPv6 standard ACL rule
|
Refer to “Configure IPv6 standard ACL”
|
-
|
|
Configure the binding with IPv6 extended ACL rule
|
Refer to “Configure IPv6 extended ACL”
|
-
|
-
When the time domain bound with the ACL rule does not exist, the ACL rule is in the effective state.
Configure Time Domain and ACL Binding
When it is necessary to control one user to access the network resources within the specified time segment, we can set the ACL rule based on the time domain to filter the packets. Whether the time domain takes effect directly affects the rules contained in the whole ACL.
Table 15-24 Configure the time domain and ACL binding
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
configure terminal
|
-
|
|
Configure the time domain to be bound with IP ACL
|
ip time-range time-range-name access-list { access-list-number | access-list-name }
|
Mandatory
By default, do not configure the time domain to be bound with IP ACL.
|
|
Configure the time domain to be bound with MAC ACL
|
mac time-range time-range-name access-list { access-list-number | access-list-name }
|
Mandatory
By default, do not configure the time domain to be bound with MAC ACL.
|
|
Configure the time domain to be bound with Hybrid ACL
|
hybrid time-range time-range-name access-list { access-list-number | access-list-name }
|
Mandatory
By default, do not configure the time domain to be bound with Hybrid ACL.
|
|
Configure the time domain to be bound with IPv6 ACL
|
ipv6 time-range time-range-name access-list { access-list-number | access-list-name }
|
Mandatory
By default, do not configure the time domain to be bound with IPv6 ACL.
|
-
When the time domain bound with the ACL rule does not exist, the ACL rule is in the effective state.
Switch
.png){kind=icon}
.png){kind=logo}
