Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Time based dial back-up system problem 1

Status
Not open for further replies.

ogulcan

IS-IT--Management
Jan 2, 2004
17
0
0
TR
Time based dial back-up system problem

I am trying to build up a time based dial back-up system but i am faced with a problem.

Time based access lists(which i have to attach a dialer list) needs a word but,the required access list for a dialer list can not be a word,it should be a number.But i can use number to create an access-list.

Does anybody have an idea about achieving this?
is it possible?

note:i cannot use tacacs or just an access list at interface because i dont want to call even done.this does not prevent the economic loss of dial backup calling at midnight.

time-range GECERLIZAMAN
periodic weekdays 7:00 to 23:59
periodic weekdays 0:00 to 2:00


ip access-list extended GECERLIZAMAN
deny ip any 0.0.111.0 255.255.0.255
deny tcp any any eq 1720
deny udp any any range 1718 1719
deny udp any any precedence critical
deny tcp any eq 1720 any
deny udp any range 1718 1719 any
permit ip any any

(config)#dialer-list 2 protocol ip list ?
<1-199> IP access list
<1300-2699> IP expanded access list


thank you

 
The access-list that ties into your dialer-list needs to be a numbered access-list. On each line of your access-list, tie in the time-range name. In your case, GECERLIZAMAN. The traffic in ACL 100 will be denied from being &quot;interesting&quot; based on the time-range tied to ACL 100. Here's an example of what you want.

Here is a link to explain time-ranges in more detail:


Here you go:

ip access-list extended 100
deny ip any 0.0.111.0 255.255.0.255 time-range GECERLIZAMAN
deny tcp any any eq 1720 time-range GECERLIZAMAN
deny udp any any range 1718 1719 time-range GECERLIZAMAN
deny udp any any precedence critical time-range GECERLIZAMAN
deny tcp any eq 1720 any time-range GECERLIZAMAN
deny udp any range 1718 1719 any time-range GECERLIZAMAN
permit ip any any

dialer-list 1 protocol ip list 100

time-range GECERLIZAMAN
periodic weekdays 7:00 to 23:59

HTH,
Nick
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top