CCNA Complete Guide 2nd Edition.pdf - Cisco Learning Home

- Below shows a sample Reflexive Access Lists configuration on RT1 as well as the output of the
show access-list EXEC command on RT1:
!
ip access-list extended Telnet-In
evaluate RACL-1
deny ip any any
ip access-list extended Telnet-Out
permit tcp host 172.16.0.2 host 10.10.10.2 eq telnet reflect RACL-1
deny ip any any
!
interface FastEthernet1/0
ip address 10.10.10.1 255.255.255.0
ip access-group Telnet-In in
ip access-group Telnet-Out out
!
----------------------------------------------------------------------------
RT1#sh access-list
Reflexive IP access list RACL-1
Extended IP access list Telnet-In
10 evaluate RACL-1
20 deny ip any any
Extended IP access list Telnet-Out
10 permit tcp host 172.16.0.2 host 10.10.10.2 eq telnet reflect RACL-1
20 deny ip any any
RT1#
- Time-based access lists provide time-oriented access control. A certain time of day and week is
specified and the period is often identified with a time range reference name. The time range
name will be used as a reference in extended ACL configuration.
- Below shows a sample Time-based Access Lists configuration that defines no Internet access
during office hours – Monday to Friday, 9am to 6pm.
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#time-range no-http
Router(config-time-range)#?
Time range configuration commands:
absolute absolute time and date
default Set a command to its defaults
exit Exit from time-range configuration mode
no Negate a command or set its defaults
periodic periodic time and date
Router(config-time-range)#periodic ?
Friday Friday
Monday Monday
Saturday Saturday
Sunday Sunday
Thursday Thursday
Tuesday Tuesday
Wednesday Wednesday
daily Every day of the week
weekdays Monday thru Friday
weekend Saturday and Sunday
Router(config-time-range)#periodic weekdays 09:00 to 18:00
Router(config-time-range)#exit
275
Copyright © 2008 Yap Chin Hoong
yapchinhoong@hotmail.com