Note IP and Internetwork Packet Exchange (IPX) extended access lists are the only access list
types that can use time-ranges.
--------------------------------------------------------------------------------
Tips To avoid confusion, use different names for time ranges and named access lists.
--------------------------------------------------------------------------------
Examples
This example shows how to deny HTTP traffic on Monday through Friday from 8:00 a.m. to 6:00 p.m and allow UDP traffic on Saturday and Sunday from noon to midnight only:
Router(config)# time-range no-http
Router(config)# periodic weekdays 8:00 to 18:00
!
Router(config)# time-range udp-yes
Router(config)# periodic weekend 12:00 to 24:00
!
Router(config)# ip access-list extended strict
Router(config)# deny tcp any any eq http time-range no-http
Router(config)# permit udp any any time-range udp-yes
!
Router(config)# interface ethernet 0
Router(config)# ip access-group strict in
阅读(1118) | 评论(0) | 转发(0) |
