Restrictions for time-based acls, Configuration tasks for time-based acls, Creating a time range – Cisco 10000 User Manual

Page 307

Advertising
background image

12-5

Cisco 10000 Series Router Software Configuration Guide

OL-2226-23

Chapter 12 Configuring Traffic Filtering

Time-Based ACLs

Restrictions for Time-Based ACLs

The Time-Based ACLs feature has the following restrictions:

You can specify a time range for only IP extended access lists. Standard access lists are not
supported.

An ACE that refers to a non-existent time-range entry is considered active.

You define time-based ACLs based on hours and minutes. You cannot specify seconds.

Configuration Tasks for Time-Based ACLs

To configure the Time-Based ACLs feature, perform the following configuration tasks:

Creating a Time Range, page 12-5

Applying a Time Range to a Numbered Access Control List, page 12-6

Applying a Time Range to a Named Access Control List, page 12-7

Creating a Time Range

To create a time range, enter the following commands beginning in global configuration mode:

Command

Purpose

Step 1

Router(config)# time-range name

Defines a named time range and enters time-range configuration
mode.

Step 2

Router(config-time-range)# periodic

days-of-the-week hh:mm to

[days-of-the-week] hh:mm

(Optional) Defines the periodic times that the time range is active.

Valid values for days-of-the-week are Monday, Tuesday,
Wednesday, Thursday, Friday, Saturday, and Sunday. You can
also specify daily for Monday through Sunday, weekdays for
Monday through Friday, and weekend for Saturday and Sunday.

The hh:mm argument specifies hours:minutes in a 24 hour format.
For example, 8:00 is 8:00 a.m. and 20:00 is 8:00 p.m.

The ending days-of-the-week argument defaults to the value you
specify in the beginning days-of-the-week argument. Specify the
ending days-of-the-week only if it is different from the beginning
days-of-the-week
.

Step 3

Router(config-time-range)# absolute

[start time date] [end time date]

(Optional) Defines the absolute times that the time range is active.

You specify the start and end arguments in the format of hh:mm
day month year
, using a 24 hour format. The minimum start value
is 00:00 1 January 1993. If you do not specify a start value, it
defaults to right now.

The maximum end value is 23:59 31 December 2035. The end
value must be greater than the start value; otherwise, an error
occurs. If you do not specify an end value, it defaults to forever
after the starting time
.

Note

You can specify only one absolute entry for each time
range you create.

Advertising