12-5
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 12 Configuring Traffic Filtering
Time-Based ACLs
Restrictions for Time-Based ACLs
The Time-Based ACLs feature has the following restrictions:
•
You can specify a time range for only IP extended access lists. Standard access lists are not
supported.
•
An ACE that refers to a non-existent time-range entry is considered active.
•
You define time-based ACLs based on hours and minutes. You cannot specify seconds.
Configuration Tasks for Time-Based ACLs
To configure the Time-Based ACLs feature, perform the following configuration tasks:
•
Creating a Time Range, page 12-5
•
Applying a Time Range to a Numbered Access Control List, page 12-6
•
Applying a Time Range to a Named Access Control List, page 12-7
Creating a Time Range
To create a time range, enter the following commands beginning in global configuration mode:
Command
Purpose
Step 1
Router(config)#
time-range
name
Defines a named time range and enters time-range configuration
mode.
Step 2
Router(config-time-range)#
periodic
days-of-the-week
hh:mm
to
[
days-of-the-week
]
hh:mm
(Optional) Defines the periodic times that the time range is active.
Valid values for
days-of-the-week
are
Monday
,
Tuesday
,
Wednesday
,
Thursday
,
Friday
,
Saturday
, and
Sunday
. You can
also specify
daily
for Monday through Sunday,
weekdays
for
Monday through Friday, and
weekend
for Saturday and Sunday.
The
hh:mm
argument specifies hours:minutes in a 24 hour format.
For example, 8:00 is 8:00 a.m. and 20:00 is 8:00 p.m.
The ending
days-of-the-week
argument defaults to the value you
specify in the beginning
days-of-the-week
argument. Specify the
ending
days-of-the-week
only if it is different from the beginning
days-of-the-week
.
Step 3
Router(config-time-range)#
absolute
[
start
time
date
] [
end
time
date
]
(Optional) Defines the absolute times that the time range is active.
You specify the
start
and
end
arguments in the format of
hh:mm
day month year
, using a 24 hour format. The minimum
start
value
is
00:00 1 January 1993
. If you do not specify a start value, it
defaults to
right now.
The maximum
end
value is
23:59 31 December 2035
. The
end
value must be greater than the
start
value; otherwise, an error
occurs. If you do not specify an
end
value, it defaults to
forever
after the starting time
.
Note
You can specify only one absolute entry for each time
range you create.