Firewall configuration job
Topology
My student number is 201 610 110 045, it is 45
router |
interface |
Ip Address |
R1 |
F0 / 0 |
10.45.1.1 |
R3 |
F0 / 0 |
10.45.1.2 |
F0 / 1 |
10.45.2.1 |
|
R4 |
F0 / 0 |
10.45.2.2 |
R2 |
F0 / 0 |
10.45.2.3 |
First configure ip address, let topology configuration pass
Time-based acl
R3:
R3 (config) # Time-the Range tt // create a time range named tt
R3 (config-Time-Range) #periodic Weekdays 9:00 to 12:00 // time set weekdays 9:00 to 12:00
R3(config-time-range)#exi
R3(config)#ip access-list extended goto
R3 (config-EXT-NaCl) #permit the any the any icmp-Time Range tt // disposed within the allowed time tt icmp packets by
R3(config-ext-nacl)#int f0/1
R3(config-if)#ip access-group goto in
View the current router time
R3#show clock
Friday found that the current time is 1:33, the time is not allowed to ping weekdays from 9:00 to 12:00 time period, in theory, R4 can not ping R1, afternoon test, theory is correct
Next, set the time setting R3 to allow the ping period of
R3#clock set 10:00:00 apr 25 2019
R3#show clock
The time now is Wednesday at 10:00 in the ping period, this time theoretically R4pingR1 can ping the next picture shows the test results, the theory established