时间访问控制列表简单应用
时间访问控制列表简单应用 A公司3560一台,端口F0/23接路由器上网,3560下有N个vlan,现在需要限制其中一个
vlan用户在工作日(周一到周六8:00~12:00 13:30~17:30)不能上网。vlan 100 IP地址192.168.3.0/24 www.zhishiwu.com 1.修改路由器时间,确保时间准确性。conf tclocktimezoneCST+8 !修改时区exitclockset9:51:00Aug32012 !修改时间 2.定义时间范围conf ttime-range workhardperiodic Monday Tuesday Wednesday Thursday Friday Saturday 8:00 to 12:00periodic Monday Tuesday Wednesday Thursday Friday Saturday 13:30 to 17:30exit www.zhishiwu.com 3.配置访问控制列表access-list 101 deny ip 192.168.3.0 0.0.0.255 any time-range workhardaccess-list 101 permit any anyint f0/23access-group 101 out