From: Jonathan Hays (nomad@gfoyle.org)
Date: Mon Mar 08 2004 - 22:56:49 GMT-3
you wrote:
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
>Behalf Of David Hurtado
>Sent: Monday, March 08, 2004 2:30 PM
>To: ccielab@groupstudy.com
>Subject: Dynamic ACL timeout
>
>
>If you are asked to use Dynaminc ACL, ensuring that the user must
>authenticate every 10 minutes, where do you establish the
>timeout of 10
>minutes:
>
>access-list 101 dynamic dinamico timeout 10 permit ip any any
>
>or in:
>
>autocommand access-enable timeout 10
>
>Probably both are valid, but i would like to be sure.
>
>Thanks a lot for the help
= = =
You need to read the Configuration Guide a little more carefully for
'access enable' and 'access-list'. One timeout is an idle timeout and
the other absolute timeout.
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/
fsecur_c/ftrafwl/scflock.htm#1001078
HTH,
Jonathan
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:16 GMT-3