This is a semantic question that I think will not be that big a deal on the
real lab.

In the time-range, the seconds are not listed and all seconds (:00 - :59)
are included.  So if you create a time range from 8:00:00 through 16:59:59
that technically takes you TO 5pm.  Not to 5:01pm...

In the real lab, I would suggest asking the proctor for clarification
because I would think that shows you clearly know the technology and HOW to
do it (the important part) just want to know how they will interpret things.

HTH,

 
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPexpert VP - Curriculum Development
IPexpert Sr. Technical Instructor
[EMAIL PROTECTED]
http://www.ipexpert.com
 
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tony Hidalgo
Sent: Monday, January 15, 2007 1:36 PM
To: [email protected]
Subject: [OSL | CCIE_RS] Time Range Question

Hello people from the list.

In the practice lab that I am currently working on, there is question about
time ranged access-lists.

The questions asks to block http traffic from "X"
router to "Y" router between 8am-5pm.

When I configured the time range, I wrote this: 
"time-range R3
periodic weekdays 8:00 to 17:00"

As far as I understand, the forbidden traffic will be blocked from 08:00
until 17:00. Starting at 17:01 it will be allowed again until the next
morning at 07:59.

The scenario from my lab is very similar to the cisco document about it:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hiap_c
/ch05/hipaclis.htm#wp1066842

Now, when I checked the answer on the material, I noticed that it comes like
this:
"time-range R3-http-security
 periodic weekdays 8:00 to 16:59"

So, my question is: How to understand "Prevent HTTP Access during working
days from 8am to 5pm ?

Thanks a lot in advanced.


 
____________________________________________________________________________
________
Have a burning question?  
Go to www.Answers.yahoo.com and get answers from real people who know.

Reply via email to