access-list cisco Time-Based ACLs Using Time Ranges

Time-based ACLs were alien in Cisco IOS Software Release 12.0.1.T. While agnate to continued ACLs in function, they acquiesce for admission ascendancy based on time. A time ambit is created that defines specific times of the day and anniversary in adjustment to apparatus time-based ACLs. The time ambit is articular by a name and again referenced by a function. Therefore, the time restrictions are imposed on the action itself. The time ambit relies on the router arrangement clock. The router alarm can be used, but the affection works best with Arrangement Time Protocol (NTP) synchronization.

These are time-based ACL commands.

!--- Defines a called time range.

time-range time-range-name

!--- Defines the alternate times.

alternate days-of-the-week hh:mm to [days-of-the-week] hh:mm

!--- Or, defines the complete times.

complete [start time date] [end time date]

!--- The time ambit acclimated in the absolute ACL.

ip access-list name|number time-rangename_of_time-range

In this example, a Telnet affiliation is acceptable from the central to alfresco arrangement on Monday, Wednesday, and Friday during business hours:

interface Ethernet0/0

ip abode 10.1.1.1 255.255.255.0

ip access-group 101 in

access-list 101 admittance tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255

eq telnet time-range EVERYOTHERDAY

time-range EVERYOTHERDAY

alternate Monday Wednesday Friday 8:00 to 17:00