From: Marc La Porte (marc.a.laporte@gmail.com)
Date: Tue Aug 12 2008 - 17:46:09 ART
Hi guys,
Question (IE lab 9, 8.2 for those interesed):
- Configure R5 to block excessive surfing the internet traffic during
working hours so that they can only go to your internal web server at
148.26.3.100.
- After hours these users should be allowed full access
- Work hours are from 9 AM to 5 PM Monday through Friday
- Use the minimum amount of access-list entries to accomplish this
Their answer:
ip access-list extended DENY_INTERNET_SURFING
permit ip any any time-range NON_WORK_HOURS
permit tcp any host 148.26.3.100 eq www
!
time-range NON_WORK_HOURS
periodic weekends 0:00 to 23:59
periodic weekdays 0:00 to 8:59
periodic weekdays 17:01 to 23:59
!
interface fa0/1
ip access-group DENY_INTERNET_SURFING in
My answer:
time-range WWW
periodic weekdays 09:00 to 16:59
!
access-list 182 permit tcp any host 148.26.3.100 eq www time-range WWW
access-list 182 deny tcp any any eq www time-range WWW
access-list 182 permit ip any any time-range WWW
!
int f0/1
ip access-group 182 in
Is my answer ok as well?
Which answer is better?
Thanks
Marc
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:30 ART