Cisco Systems IE 2000 Using Time Ranges with ACLs

37-16
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 37 Configuring Network Security with ACLs
How to Configure Network Security with ACLs
Using Time Ranges with ACLs
Repeat the steps if you have multiple items that you want in effect at different times.
Step 3 {deny | permit} {source [source-wildcard] |
host source | any} [log]
or
{deny | permit} protocol {source
[source-wildcard] | host source | any}
{destination [destination-wildcard] | host
destination | any} [precedence precedence]
[tos tos] [established] [log] [time-range
time-range-name]
In access-list configuration mode, specifies one or more conditions
denied or permitted to decide if the packet is forwarded or dropped.
• host source—A source and source wildcard of source 0.0.0.0.
• any—A source and source wildcard of 0.0.0.0
255.255.255.255.
or
In access-list configuration mode, specify the conditions allowed
or denied. Use the log keyword to get access list logging messages,
including violations.
See the “Creating a Numbered Extended ACL” section on
page 37-13 for definitions of protocols and other keywords.
• host source—A source and source wildcard of source 0.0.0.0.
• host destination—A destination and destination wildcard of
destination 0.0.0.0.
• any—A source and source wildcard or destination and
destination wildcard of 0.0.0.0 255.255.255.255.
Step 4 end Returns to privileged EXEC mode.
Command Purpose
Command Purpose
Step 1 configure terminal Enters global configuration mode.
Step 2 time-range time-range-name Assigns a meaningful name (for example, workhours) to the time range
to be created, and enters time-range configuration mode. The name
cannot contain a space or quotation mark and must begin with a letter.
Step 3 absolute [start time date]
[end time date]
or
periodic day-of-the-week hh:mm to
[day-of-the-week] hh:mm
or
periodic {weekdays | weekend | daily}
hh:mm to hh:mm
Specifies when the function it will be applied to is operational.
• You can use only one absolute statement in the time range. If you
configure more than one absolute statement, only the one configured
last is executed.
• You can enter multiple periodic statements. For example, you could
configure different hours for weekdays and weekends.
See the example configurations.
Step 4 end Returns to privileged EXEC mode.