CISCO time-based access control
Recently, the company requires the installation of wireless AP on the second floor of the canteen for employees' lunch break only. Read a lot online and find the following ways.
Purpose: only allow 3.3.3.2 12:00-13:00 network open, other time off, and other IP addresses Internet normal.
The following topology diagram:
Conf t
Interface FastEthernet1/0
Ip address 1.1.1.1 255.255.255.0
Ip access-group net_list1 in
No shut
Interface FastEthernet2/0
Ip address 2.2.2.1 255.255.255.0
No shut
Interface FastEthernet3/0
Ip address 3.3.3.1 255.255.255.0
No shut
=
Conf t
Time-range time1
Absolute start 08:00 01 January 2006 end 17:00 30 December 2014
Periodic daily 00:00 to 12:00
Periodic daily 13:00 to 17:00
Exit
Ip access-list extended net_list1
Deny ip any host 3.3.3.2 time-range time1
Permit ip any any
=
Test:
Ip:3.3.3.2 can access the Internet from 12:00 to 13:00 and is closed at other times.
Ping 1.1.1.1
Collected in 2014-03-25
From Baidu Space
