Table of Contents
Advertisement
Chapter 12
Configuring Traffic Filtering
Restrictions for Time-Based ACLs
The Time-Based ACLs feature has the following restrictions:
•
•
•
Configuration Tasks for Time-Based ACLs
To configure the Time-Based ACLs feature, perform the following configuration tasks:
•
•
•
Creating a Time Range
To create a time range, enter the following commands beginning in global configuration mode:
Command
Step 1
Router(config)# time-range name
Step 2
Router(config-time-range)# periodic
days-of-the-week hh:mm to
[days-of-the-week] hh:mm
Step 3
Router(config-time-range)# absolute
[start time date] [end time date]
OL-2226-23
You can specify a time range for only IP extended access lists. Standard access lists are not
supported.
An ACE that refers to a non-existent time-range entry is considered active.
You define time-based ACLs based on hours and minutes. You cannot specify seconds.
Creating a Time Range, page 12-5
Applying a Time Range to a Numbered Access Control List, page 12-6
Applying a Time Range to a Named Access Control List, page 12-7
Purpose
Defines a named time range and enters time-range configuration
mode.
(Optional) Defines the periodic times that the time range is active.
Valid values for days-of-the-week are Monday, Tuesday,
Wednesday, Thursday, Friday, Saturday, and Sunday. You can
also specify daily for Monday through Sunday, weekdays for
Monday through Friday, and weekend for Saturday and Sunday.
The hh:mm argument specifies hours:minutes in a 24 hour format.
For example, 8:00 is 8:00 a.m. and 20:00 is 8:00 p.m.
The ending days-of-the-week argument defaults to the value you
specify in the beginning days-of-the-week argument. Specify the
ending days-of-the-week only if it is different from the beginning
days-of-the-week.
(Optional) Defines the absolute times that the time range is active.
You specify the start and end arguments in the format of hh:mm
day month year, using a 24 hour format. The minimum start value
is 00:00 1 January 1993. If you do not specify a start value, it
defaults to right now.
The maximum end value is 23:59 31 December 2035. The end
value must be greater than the start value; otherwise, an error
occurs. If you do not specify an end value, it defaults to forever
after the starting time.
You can specify only one absolute entry for each time
Note
range you create.
Cisco 10000 Series Router Software Configuration Guide
Time-Based ACLs
12-5
Advertisement
Table of Contents
Troubleshooting
