Scheduling Extended Access List Activation; Adding A Time Range - Cisco 7604 Configuration Manual

Scheduling Extended Access List Activation

Scheduling Extended Access List Activation
You can schedule each ACE to be activated at specific times of the day and week by applying a time
range to the ACE. This section includes the following topics:
•
•

Adding a Time Range

To add a time range to implement a time-based access list, perform the following steps:
Identify the time-range name by entering the following command:
Step 1
hostname(config)# time-range name
Step 2 Specify the time range as either a recurring time range or an absolute time range.
Note
Multiple periodic entries are allowed per time-range command. If a time-range command has both
absolute and periodic values specified, then the periodic commands are evaluated only after the
absolute start time is reached, and are not further evaluated after the absolute end time is reached.
•
•
The following is an example of an absolute time range beginning at 8:00 a.m. on January 1, 2006.
Because no end time and date are specified, the time range is in effect indefinitely.
hostname(config)# time-range for2006
hostname(config-time-range)# absolute start 8:00 1 january 2006
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
13-24
Adding a Time Range, page 13-24
Applying the Time Range to an ACE, page 13-25
Users could experience a delay of approximately 80 to 100 seconds after the specified end time
for the ACL to become inactive. For example, if the specified end time is 3:50, because the end
time is inclusive, the command is picked up anywhere between 3:51:00 and 3:51:59. After the
command is picked up, the security appliance finishes any currently running task and then
services the command to deactivate the ACL.
Recurring time range:
hostname(config-time-range)# periodic days-of-the-week time to [days-of-the-week] time
You can specify the following values for days-of-the-week:
monday, tuesday, wednesday, thursday, friday, saturday, and sunday.
–
daily
–
weekdays
–
weekend
–
The time is in the format hh:mm. For example, 8:00 is 8:00 a.m. and 20:00 is 8:00 p.m.
Absolute time range:
hostname(config-time-range)# absolute start time date [end time date]
The time is in the format hh:mm. For example, 8:00 is 8:00 a.m. and 20:00 is 8:00 p.m.
The date is in the format day month year; for example, 1 january 2006.
Chapter 13 Identifying Traffic with Access Lists
OL-20748-01