Time-based acl

Firewall configuration job

Topology

 

 

My student number is 201 610 110 045, it is 45

router

interface

Ip Address

R1

F0 / 0

10.45.1.1

R3

F0 / 0

10.45.1.2

F0 / 1

10.45.2.1

R4

F0 / 0

10.45.2.2

R2

F0 / 0

10.45.2.3

 

First configure ip address, let topology configuration pass

 

Time-based acl

R3:

R3 (config) # Time-the Range tt // create a time range named tt

R3 (config-Time-Range) #periodic Weekdays 9:00 to 12:00 // time set weekdays 9:00 to 12:00

R3(config-time-range)#exi

R3(config)#ip access-list extended goto

R3 (config-EXT-NaCl) #permit the any the any icmp-Time Range tt // disposed within the allowed time tt icmp packets by

R3(config-ext-nacl)#int f0/1

R3(config-if)#ip access-group goto in

 

View the current router time

R3#show clock

 

 

Friday found that the current time is 1:33, the time is not allowed to ping weekdays from 9:00 to 12:00 time period, in theory, R4 can not ping R1, afternoon test, theory is correct

 

 

Next, set the time setting R3 to allow the ping period of

R3#clock set 10:00:00 apr 25 2019

R3#show clock

 

 

The time now is Wednesday at 10:00 in the ping period, this time theoretically R4pingR1 can ping the next picture shows the test results, the theory established

 

Guess you like

Origin www.cnblogs.com/markiki/p/10945511.html
ACL