Question : Problem: CISCO 1800 access-list specific interface

I have a 1800 and have created access-list 101 as follows:

   access-list 101 deny   tcp any any time-range 4pm6pm

With the "time-range" value as follows:

   time-range 4pm6pm
    periodic weekdays 16:00 to 18:30

I have a VOIP box that I do not want this access-list applied to. The VOIP box gets its IP via DHCP from the router.

My question is can I apply this access-list to specific interface (all exept the VOIP box)?

My router does not accept the "ip access-list" command when configuring an interface (see bellow):
   jsouttervpn(config)#int fa2
   jsouttervpn(config-if)#ip ?
   Interface IP configuration subcommands:
     address  Set the IP address of an interface
     ddns     Configure dynamic DNS
     dhcp     Configure DHCP parameters for this interface
     igmp     IGMP interface commands
     rsvp     RSVP Interface Commands
     vrf      VPN Routing/Forwarding parameters on the interface

I may be looking at this the wrong way but what I am try to accomplish is to block all devices weeks-days between 16:00 and 18:30 except the VOIP box.

Any help would be greatly appreciated


Answer : Problem: CISCO 1800 access-list specific interface

If this is an 1800 with an 8 port managed switch on it you would apply the ACL onto the "interface VLAN 1" using "ip access-group 101 in" or you apply it to the outside interface or WAN port it will ussually have an interface number like fastethernet 0/0.


Now as far as excluding the VOIP box even if you are using the router for DHCP you can do a single "reservation" per DHCP pool so to speak and just exclude that address from your normal address range. So if your mac address of the VOIP box is 1111.2222.3333 and you wanted it to always be IP 172.16.2.254 address the commands would be.

ip dhcp excluded-address 172.16.2.254
ip dhcp pool Data
host 172.16.2.254
hardware-address 1111.2222.3333 ieee802
client-name VOIP


You could then add this to your ACL

access-list 101 permit ip host 172.16.2.254 any
access-list 101 deny tcp any any time-range 4pm6pm



Random Solutions  
 
programming4us programming4us