Solved

Time-Range

Posted on 2013-06-05
6
161 Views
Last Modified: 2013-07-10
Hi experts,

I created a policy-map to block some websites and it works well, and I created a time-range for every day start from 8 to 4, but I don't know how to include this time range in my policy-map.

Thanks
0
Comment
Question by:lexmark1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 64

Expert Comment

by:btan
ID: 39225307
0
 

Author Comment

by:lexmark1
ID: 39225533
Hi Dear,
Thanks for reply but I want to include my time-range in my existing class-policy to do time for website blocking not time for web surfing.

Thanks
0
 
LVL 64

Assisted Solution

by:btan
btan earned 500 total points
ID: 39225628
Would it be simply be done in access list instead
uration

ip access-list extended RESTRICTED_SITES

deny ip 172.16.30.0 0.0.0.127 66.220.144.0 0.0.15.255 time-range OFFICE_HRS
deny ip 172.16.30.0 0.0.0.127 204.74.64.0 0.0.63.255 time-range OFFICE_HRS
deny ip 172.16.30.0 0.0.0.127 69.63.176.0 0.0.15.255 time-range OFFICE_HRS
deny ip 172.16.30.0 0.0.0.127 69.171.224.0 0.0.31.255 time-range OFFICE_HRS
permit ip any any
0
Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

 
LVL 64

Expert Comment

by:btan
ID: 39225669
Probably this is a better one
https://supportforums.cisco.com/thread/2070269
0
 

Author Comment

by:lexmark1
ID: 39268093
Hi breadtan,

Is there any way to apply time-range in my exist class-map without accees-list?

Thanks
0
 
LVL 64

Accepted Solution

by:
btan earned 500 total points
ID: 39269037
so far time-range need access-list  (in base licence)

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#timebasedtimerange

Time-Based ACLs Using Time Ranges

Time-based ACLs were introduced in Cisco IOS Software Release 12.0.1.T. While similar to extended ACLs in function, they allow for access control based on time. A time range is created that defines specific times of the day and week in order to implement time-based ACLs. The time range is identified by a name and then referenced by a function. Therefore, the time restrictions are imposed on the function itself. The time range relies on the router system clock. The router clock can be used, but the feature works best with Network Time Protocol (NTP) synchronization.

http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_19_ea1/configuration/guide/swacl.html#wp1071539
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/acl_objects.html#wp1525991
0

Featured Post

Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cybersecurity has become the buzzword of recent years and years to come. The inventions of cloud infrastructure and the Internet of Things has made us question our online safety. Let us explore how cloud- enabled cybersecurity can help us with our b…
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question