From: srdja blagojevic (srdja1@pexim.co.yu)
Date: Wed Nov 01 2006 - 23:37:09 ART
No, it is not the same.
In the first example you are using ACL until Jan 1,2007, and in second
example you are using ACL from Jan 1, 2007.
Permit or deny in ACL do not influence on time range. IOS first look at time
range, and if it is true (valid), then use this line in ACL in which time
range option is applied.
HTH,
Srdja
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Lab
Rat #109385382
Sent: Wednesday, November 01, 2006 18:54
To: cisco@groupstudy.com; ccielab@groupstudy.com
Subject: Time Range ACL Question
If the question is asking:
"allow access to the server until 00:01 Jan 1, 2007 UTC"
Is this:
Time-range ALLOW
Periodic daily 00:00 to 23:59
Absolute end 00:00 1 Jan 2007
Access-list permit ip any host 10.0.0.10 time-range ALLOW
The same as this:
Time-range DENY
Absolute start 00:01 1 Jan 2007
Access-list deny ip any host 10.0.0.10 time-range DENY
Thanks,
Ed
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:44 ART