time-range question

From: Glenn Johnson (gj7@comcast.net)
Date: Thu Jul 17 2003 - 22:54:39 GMT-3


Hello,

      If asked to configure a given time-range in a practice lab along the
lines of:

      "Block all web traffic between 12:00 pm and 1:00 pm during weekdays"

Should we specify:

IP access-list extended NO_SURF_FOR_YOU

      Deny tcp any any eq www time-range LUNCH

      Permit IP ANY ANY

Time-range LUNCH

      Periodic weekdays 12:00 to 12:59

OR should we use

Time-range LUNCH

      Periodic weekdays 12:00 to 13:00

The reason I am asking is because of the time-range being "active" until the
beginning of the next minute. The first example would stop right at 1:00
(seemingly satisfying the request), but the second would last until 1:01.
Or is this being too concerned about details? If there is such a thing..

Thanks



This archive was generated by hypermail 2.1.4 : Wed Aug 06 2003 - 06:52:43 GMT-3