ACL — time-gated entries with time-range
- Security
- Intermediate
- 12 min
- 3 steps
- Cisco IOS-style
Define a time-range BIZ-HOURS covering Mon-Fri 08:00-18:00 UTC. Reference it from an ACL entry that permits inbound HTTP only during business hours. Outside the window, the entry is treated as if it didn't exist — implicit deny applies.
Open this lab in your browser →
Free · no install · no account
Scenario
time-range NAME defines a named window. ACEs reference the name via the time-range keyword. Outside the window the gated entry is skipped at evaluation time. Two flavours: - periodic <day-spec> HH:MM to HH:MM — recurring weekly window. - absolute start <iso8601> end <iso8601> — one-shot window between two points in time. Day specifiers: daily, weekdays, weekend, or one of monday|tuesday|wednesday|thursday|friday|saturday|sunday. Determinism note: the evaluator reads the simulator's logical clock (simTime), not wall-clock. Lab YAML can set up scenarios at known weekday/time positions; tests use deterministic simTime offsets. netverdict deviation: real Cisco's absolute clause uses start HH:MM dd MONTH yyyy syntax. netverdict uses ISO-8601 instead — simpler grammar, same semantics.
Topology
1 × router · Cisco IOS-style
R1— router
What you will do
Define
time-range BIZ-HOURSwith a periodic clause:periodic weekdays 08:00 to 18:00.Define
ip access-list extended WORK-WEBwithpermit tcp any any eq 80 time-range BIZ-HOURS(HTTP only when the time-range is active).Apply
WORK-WEBinbound onGi0/0.
Open this lab in your browser →
More labs on this topic
- ACL: block a single hostBeginner · 10 min
- ACL: named extended — proto + src + dstIntermediate · 12 min
- Extended ACL — port range matchersIntermediate · 7 min
- Extended ACL with
object-group networkIntermediate · 10 min
This lab in other languages
ACL — zeitgesteuerte Einträge mit time-rangeACL — entradas con tiempo controlado vía time-rangeACL — entradas controladas por tempo com time-rangeACL — entrées temporisées avec time-rangeACL — time-range के साथ time-gated entriesACL — 使用 time-range 的时间门控表项ACL — entry temporizzate con time-rangeACL — time-range による時間ゲート付きエントリACL — time-range 로 시간 게이트된 엔트리ACL — записи с временным ограничением через time-rangeACL — time-range ile zaman kapılı entry'lerACL — các entry điều kiện thời gian với time-range