40-141
Usage Guide:
Absolute time and date, assign specific year, month, day, hour, minute of the start, shall not configure multiple
absolute time and date, when in repeated configuration, the latter configuration covers the absolute time and date of
the former configuration.
Examples:
Make configurations effective from 6:00:00 to 13:30:00 from Oct. 1, 2004 to Jan. 26, 2005.
Switch(config)#Time-range admin_timer
Switch(Config-Time-Range-admin_timer)#absolute start
6:00:00 2004.10.1 end 13:30:00 2005.1.26
40.3 access-list (ip extended)
Command:
access-list
<num>
{deny | permit} icmp {{
<sIpAddr>
<sMask>
} | any-source | {host-source
<sIpAddr>
}}
{{
<dIpAddr>
<dMask>
} | any-destination | {host-destination
<dIpAddr>
}} [
<icmp-type>
[
<icmp-code>
]]
[precedence
<prec>
] [tos
<tos>
][time-range
<time-range-name>
]
access-list
<num>
{deny | permit} igmp {{
<sIpAddr>
<sMask>
} | any-source | {host-source
<sIpAddr>
}}
{{
<dIpAddr>
<dMask>
} | any-destination | {host-destination
<dIpAddr>
}} [<
igmp
-
type
>] [precedence
<prec>
]
[tos
<tos>
][time-range
<time-range-name>
]
access-list
<num>
{deny | permit} tcp {{
<sIpAddr>
<sMask>
} | any-source | {host-source
<sIpAddr>
}}
[s-port {
<sPort
> | range
<sPortMin> <sPortMax
> }] {{
<dIpAddr>
<dMask>
} | any-destination |
{host-destination <
dIpAddr
> }} [d-port { <
dPort>
| range <
dPortMin> <dPortMax
>
}] [ack+ fin+ psh+ rst+ urg+
syn] [precedence
<prec>
] [tos
<tos>
][time-range
<time-range-name>
]
access-list <num> {
deny |
permit} udp
{{ <
sIpAddr> <
sMask> }
|
any-source | {host-source
<sIpAddr>
}}
[s-port
{ <sPort
> | range
<sPortMin
>
<sPortMax>
] {{ <dIpAddr> <
dMask> }
| any-destination |
{host-destination
<dIpAddr> }
} [d-port
{ <dPort
> |
range <dPortMin
> <dPortMax
> }] [precedence
<prec>
] [tos
<tos>
][time-range
<time-range-name>
]
access-list <
num
> {deny
|
permit} {eigrp |
gre | igrp |
ipinip
|
ip | ospf |
<protocol-num>
} {{ <
sIpAddr>
<sMask> }
|
any-source
| {
host-source <sIpAddr> }
}
{{
<dIpAddr
> <dMask> } |
any-destination
|
{host-destination <dIpAddr> }}
[precedence <prec
> ]
[tos <
tos> ][time-range <
time-range-name> ]
no access-list
<num>
Functions:
Create a numeric extended IP access rule to match specific IP protocol or all IP protocol; if access-list of this coded
numeric extended does not exist, thus to create such a access-list.