Can an ACL rule match a time range that does not exist? Does the ACL take effect

When the ACL rule is configured to match time-range time-name, the configuration takes effect regardless of whether the time-range time-name command has been configured.

If the ACL rule matches no time-range time-name, the device considers that the ACL rule is invalid and the time-range time-name command is in inactive state.

After the time-range time-name command is configured and in active state, the ACL rule automatically updates its status and changes to valid.

Scroll to top