beautypg.com

IBM 12.1(22)EA6 User Manual

Page 399

background image

22-15

Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide

24R9746

Chapter 22 Configuring Network Security with ACLs

Configuring ACLs

Beginning in privileged EXEC mode, follow these steps to configure a time-range parameter for an
ACL:

To remove a configured time-range, use the no time-range time-range-name global configuration
command.

Repeat the steps if you have multiple items that you want operational at different times.

This example shows how to configure time ranges for workhours and for company holidays and how to
verify your configuration.

Switch(config)# time-range workhours

Switch(config-time-range)# periodic weekdays 8:00 to 12:00

Switch(config-time-range)# periodic weekdays 13:00 to 17:00

Switch(config-time-range)# exit

Switch(config)# time-range new_year_day_2000

Switch(config-time-range)# absolute start 00:00 1 Jan 2000 end 23:59 1 Jan 2000

Switch(config-time-range)# exit

Switch(config)# time-range thanksgiving_2000

Switch(config-time-range)# absolute start 00:00 22 Nov 2000 end 23:59 23 Nov 2000

Switch(config-time-range)# exit

Switch(config)# time-range christmas_2000

Switch(config-time-range)# absolute start 00:00 24 Dec 2000 end 23:50 25 Dec 2000

Switch(config-time-range)# end

Switch# show time-range

time-range entry: christmas_2000 (inactive)

absolute start 00:00 24 December 2000 end 23:50 25 December 2000

time-range entry: new_year_day_2000 (inactive)

absolute start 00:00 01 January 2000 end 23:59 01 January 2000

time-range entry: thanksgiving_2000 (inactive)

absolute start 00:00 22 November 2000 end 23:59 23 November 2000

time-range entry: workhours (inactive)

periodic weekdays 8:00 to 12:00

periodic weekdays 13:00 to 17:00

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

time-range time-range-name

Identify the time-range by a meaningful name (for example, workhours),
and enter time-range configuration mode. The name cannot contain a
space or quotation mark and must begin with a letter.

Step 3

absolute [start time date]
[end time date]

or

periodic day-of-the-week hh:mm to
[day-of-the-week] hh:mm

or

periodic {weekdays | weekend | daily}
hh:mm to hh:mm

Specify when the function it will be applied to is operational. Use some
combination of these commands; multiple periodic statements are
allowed; only one absolute statement is allowed. If more than one
absolute statement is configured, only the one configured last is executed.

Step 4

end

Return to privileged EXEC mode.

Step 5

show time-range

Verify the time-range configuration.

Step 6

copy running-config startup-config

(Optional) Save your entries in the configuration file.