yes, you are absolutely right, and that's what I did. No one else responded
to my message but these timed access lists are the best thing since sliced
bread.... I no longer need to be concerned with my daughter compromising Net
Nanny (which she is quite good at) even with her quite liberal surfing
privileges. Here's the config in case you or anyone else is interested:
ip access-list extended Michelle_Limit
permit ip host 192.168.0.1 any
permit ip host 192.168.0.2 any
permit ip host 192.168.0.3 any time-range fri-evening
permit ip host 192.168.0.3 any time-range sat-evening
permit ip host 192.168.0.3 any time-range sun-evening
permit ip host 192.168.0.3 any time-range weekdays
permit ip host 192.168.0.3 any time-range weekend
time-range fri-evening
periodic Friday 19:00 to 21:30
time-range sat-evening
periodic Saturday 18:30 to 21:30
time-range sun-evening
periodic Sunday 18:30 to 20:30
time-range weekdays
periodic weekdays 7:30 to 8:00
periodic weekdays 15:00 to 17:30
periodic weekdays 19:00 to 20:30
time-range weekend
periodic weekend 7:30 to 10:00
periodic weekend 12:30 to 17:00
Tim
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Gareth Hinton
> Sent: Sunday, January 21, 2001 8:19 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Timed Access Lists
>
>
> Timothy,
>
> Would it not be better to use permits first, so that it does process them
> all.
> Then use a deny if you want to log exceptions, or otherwise leave it off.
>
> Gareth
>
>
> "Timothy Metz" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Has anyone ever used timed access lists?
> >
> > I'm wondering if I can specify multiple times and days and still process
> > through the list or will I exit the list after a test condition is
> > compared... This is getting hard to verbalize but I'll give it a shot...
> >
> > ie:
> >
> > I want to limit www browsing on one time schedule during the week and a
> > different time schedule during the weekend.
> >
> > Setting up two time ranges is not a problem
> >
> > Now I need to write the access list
> >
> > deny tcp any any eq http time-range no-http-weekdays
> > deny tcp any any eq http time-range no-http-weekends
> > permit ip any any
> >
> > will this work or will http traffic exit the list after the first test
> > condition?
> >
> >
> > Thanks
> >
> > Tim
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _________________________________
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]