Cisco 时间 访问列表
1.基于 时间 的 访问 列表 借助基于时间的访问列表, 可以 控制用户在某个时间段对访问的访问权限. 进入全局配置模式 Switch#conf t 指定的时间范围命名有一个有意义的名称.名称不能包括空格和引号,并且必须以字母开头. Switch(config)#time-range time-range
1.基于时间的访问列表
借助基于时间的访问列表,可以控制用户在某个时间段对访问的访问权限.
进入全局配置模式
Switch#conf t
指定的时间范围命名有一个有意义的名称.名称不能包括空格和引号,并且必须以字母开头.
Switch(config)#time-range time-range-name
指定时间范围
Switch(config-time-range)#absolute [start time date] [end time date]
或者
periodic day-of-the-week hh:mm to [day-of-the-week] hh:mm
或者
periodic {weekdays | weekend | daily} hh:mm to hh:mm
Absolute: 指定绝对时间范围.该关键字之后紧跟着start和end关键字. 若使访问列表中相关的permit 或deny语名生效,则start和end之后应当紧跟开始和结束的时间.需要注意的是,时间以24小时格式表示,日期以(日/月/年"格式表示.
periodic:尽管每个时间范围只能有一下absolute语句，但是却可以有多个periodic语句。别外，absolute语句法只拥有 开始和结束时间，以及日期等少数几个参数，而periodic语句可以使用大量参数，范围可以是一星期中的某一天或几天的组合，或者使用关键字daily weekdays weekend 等。表12-1列出了在语句中可以出使用的每星期天数中的参数。
|
Monday, Tuesday, Wednesday, Thursday ,Friday, Saturday, Sunday |
某一天或某几天的组合 |
|
Daily |
从星期一至星期天 |
|
Weekend |
星期六和星期日 |
|
Weekdays |
从星期一至星期五 |
返回特权配置模式
Switch(config-time-range)#end
校验当前设置
Switch#show time-range
保存当前配置
copy running-config startup-config
借助基于时间的访问列表，可以控制用户在某个时间段的访问权限。
限制用户网络应用
普通用户使用“10.1.0.0/16" 段的IP地址,若要限制所有员工在周一至周五8:00~18:00使用QQ和MSN聊天,可以在访问列表中添加以下语名:
time-range deny-qq
----------定义时间范围名称为"deny-qq"
periodic weekdays start 8:00 end 18:00
---------时间范围为周一至周五的8:00~18:00
ip access-list extend internet_limit
deny tcp 10.1.0.0 0.0.255.255 any eq 1863 time-range deny-qq
deny tcp 10.1.0.0 0.0.255.255 any eq 8000 time-range deny-qq
deny tcp 10.1.0.0 0.0.255.255 any eq 1080 time-range deny-qq
deny udp 10.1.0.0 d0 0.255.255 any eq 8000 time-range deny-qq
deny udp 10.1.0.0 0.0.255.255 any eq 4000 time-range deny-qq
deny udp 10.1.0.0 0.0.255.255 any eq 1080 time-range deny-qq
----定义QQ和MSN聊天使用的协议和端口号
permit ip any any
其余访问不予限制
需要注意的是,网络应用程序所使用的端口号,大多都可以在下述文件中找到.
win9X:%windir%\services
winNT/2000/xp/2003:%windir%\system32\drivers\etc\services
linux:/etc/services
如果在services 文件中找不端口的应用,可以在运行程序后运行netstat-ap 比较并找出应用所使用的端口号
允许网络应用启用
为了保证在非工作时间没有用户从内部登陆到交换机,使交换机以太网口FE0/0 仅仅在星期一至星期五的上午9：00到下午5:00之间接收目的端口23(telnet)的TCP报文,而其他非工作时则一律禁止.
相关配如下:
interface fastethernet 0/0
ip access-group 101 in
-----将IP访问列表101应用至该端口
access-list 101 permit tcp any any eq telnet time-range nettel
-----设置IP访问列表101
time-range nettl
periodic weekdays 9:00 to 17:00
-----设置时间访问列表nettel
2.相关配置命令
时间访问列表相关配置命
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
AI Hentai Generator
Generate AI Hentai for free.
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
How much does a Douyin level 10 light sign cost? How many days does it take to create a level 10 fan sign?
Mar 11, 2024 pm 05:37 PM
On the Douyin platform, many users are eager to obtain level certification, and the level 10 light sign shows the user's influence and recognition on Douyin. This article will delve into the price of Douyin’s level 10 light boards and the time it takes to reach this level to help users better understand the process. 1. How much does a level 10 Douyin light sign cost? The price of Douyin's 10-level light signs will vary depending on market fluctuations and supply and demand. The general price ranges from a few thousand yuan to ten thousand yuan. This price mainly includes the cost of the light sign itself and possible service fees. Users can purchase level 10 light signs through Douyin’s official channels or third-party service agencies, but they should pay attention to legal channels when purchasing to avoid false or fraudulent transactions. 2. How many days does it take to create a level 10 fan sign? Reach level 10 light sign
How to count the number of elements in a list using Python's count() function
Nov 18, 2023 pm 02:53 PM
How to use Python's count() function to calculate the number of an element in a list requires specific code examples. As a powerful and easy-to-learn programming language, Python provides many built-in functions to handle different data structures. One of them is the count() function, which can be used to count the number of elements in a list. In this article, we will explain how to use the count() function in detail and provide specific code examples. The count() function is a built-in function of Python, used to calculate a certain
How to Make a Shopping List in the iOS 17 Reminders App on iPhone
Sep 21, 2023 pm 06:41 PM
How to Make a GroceryList on iPhone in iOS17 Creating a GroceryList in the Reminders app is very simple. You just add a list and populate it with your items. The app automatically sorts your items into categories, and you can even work with your partner or flat partner to make a list of what you need to buy from the store. Here are the full steps to do this: Step 1: Turn on iCloud Reminders As strange as it sounds, Apple says you need to enable reminders from iCloud to create a GroceryList on iOS17. Here are the steps for it: Go to the Settings app on your iPhone and tap [your name]. Next, select i
How to create a grocery list: Use the Reminders app for iPhone
Dec 01, 2023 pm 03:37 PM
In iOS 17, Apple added a handy little list feature to the Reminders app to help you when you're out shopping for groceries. Read on to learn how to use it and shorten your trip to the store. When you create a list using the new "Grocery" list type (named "Shopping" outside the US), you can enter a variety of food and groceries and have them automatically organized by category. This organization makes it easier to find what you need at the grocery store or while out shopping. Category types available in alerts include Produce, Bread & Cereals, Frozen Foods, Snacks & Candy, Meat, Dairy, Eggs & Cheese, Baked Goods, Baked Goods, Household Products, Personal Care & Wellness, and Wine, Beer & Spirits . The following is created in iOS17
How to set the time for publishing works on Xiaohongshu? Is the time for publishing the work accurate?
Mar 24, 2024 pm 01:31 PM
Xiaohongshu, a platform full of life and knowledge sharing, allows more and more creators to express their opinions freely. In order to get more attention and likes on Xiaohongshu, in addition to the quality of content, the time of publishing works is also crucial. So, how to set the time for Xiaohongshu to publish works? 1. How to set the time for publishing works on Xiaohongshu? 1. Understand the active time of users. First, it is necessary to clarify the active time of Xiaohongshu users. Generally speaking, 8 pm to 10 pm and weekend afternoons are the times when user activity is high. However, this time period will also vary depending on factors such as audience group and geography. Therefore, in order to better grasp the active period of users, it is recommended to conduct a more detailed analysis of the behavioral habits of different groups. By understanding users’ lives
How long does it take to clear the Elden Ring?
Mar 11, 2024 pm 12:50 PM
Players can experience the main plot of the game and collect game achievements when playing in Elden's Circle. Many players don't know how long it takes to clear Elden's Circle. The player's clearance process is 30 hours. How long does it take to clear the Elden Ring? Answer: 30 hours. 1. Although this 30-hour clearance time does not refer to a master-like speed pass, it also omits a lot of processes. 2. If you want to get a better game experience or experience the complete plot, then you will definitely need to spend more time on the duration. 3. If players collect them all, it will take about 100-120 hours. 4. If you only take the main line to brush BOSS, it will take about 50-60 hours. 5. If you want to experience it all: 150 hours of base time.
Detailed explanation of Linux file time viewing techniques
Feb 21, 2024 pm 01:15 PM
Detailed explanation of Linux file time viewing techniques In Linux systems, file time information is very important for file management and tracking changes. The Linux system records file change information through three main time attributes, namely access time (atime), modification time (mtime) and change time (ctime). This article details how to view and manage this file time information, and provides specific code examples. 1. Check the file time information by using the ls command with the parameter -l to list the files.
How to solve the problem of inaccessibility after Tomcat deploys war package
Jan 13, 2024 pm 12:07 PM
How to solve the problem that Tomcat cannot successfully access the war package after deploying it requires specific code examples. As a widely used Java Web server, Tomcat allows developers to package their own developed Web applications into war files for deployment. However, sometimes we may encounter the problem of being unable to successfully access the war package after deploying it. This may be caused by incorrect configuration or other reasons. In this article, we'll provide some concrete code examples that address this dilemma. 1. Check Tomcat service
