topic Re: access-list every month in Network Security

access-list every month

CCDECCDE9 — Mon, 11 Mar 2019 16:53:36 GMT

How can I add the folllowing access-list to work once every month for 24 hrs from 12am-12am on PIX-525-6.3 Version . I do not have ASDM installed on it so I need command line only.

access-list 102 permit ip host 16.19.x.y host 10.32.1.25

Thanks

Re: access-list every month

Panos Kampanakis — Mon, 04 Jan 2010 17:58:01 GMT

I don't think you can achieve it mothly. But you can use the time range option for the ACL

access-list 102 permit ip host 16.19.x.y host 10.32.1.25 time-range test

time-range test

periodic ...

Your option about the periodicity are

Friday     Friday
Monday     Monday
Saturday   Saturday
Sunday     Sunday
Thursday   Thursday
Tuesday    Tuesday
Wednesday Wednesday
daily      Every day of the week
weekdays   Monday thru Friday
weekend    Saturday and Sunday

You can't set a monthly option there though.

You can also use the absolute option instead of the periodic that give you the option to se the month. It should something like

time-range t

absolute start 00:01 1 January 2010 end 23:59 12 January 2010

absolute start 00:01 1 Feb 2010 end 23:59 12 Feb 2010

absolute start 00:01 1 March 2010 end 23:59 12 March 2010

...etc

So you can use one of those.

I hope it helps.

Re: access-list every month

CCDECCDE9 — Mon, 04 Jan 2010 18:10:41 GMT

Time-range is not available in this 6.3 version

Re: access-list every month

Panos Kampanakis — Mon, 04 Jan 2010 18:23:34 GMT

I am sorry, I didn't know you were running 6.3.

In 6.3 I don't thin you can achieve it except if you write a script that connects to the PIX and put the ACE there or do it manually.