145
(QCT) (Config)#time-range work-hours
2. Configure an entry for the time range that applies to the morning shift Monday through Friday.
(QCT) (Config-time-range)#periodic weekdays 8:00 to 12:00
3. Configure an entry for the time range that applies to the afternoon shift Monday through Friday.
(QCT) (Config-time-range)#periodic weekdays 13:00 to 18:00
4. Configure an entry for the time range that applies to Saturday and Sunday.
(QCT) (Config-time-range)#periodic weekend 8:30 to 12:30
(QCT) (Config-time-range)#exit
5. Create an extended ACL that denies HTTP traffic during the work-hours time range.
(QCT) (Config)#access-list 101 deny tcp any any eq http time-range work-hours
6. Apply the ACL to ingress traffic in VLAN 100.
(QCT) (Config)#ip access-group 101 vlan 100 in
(QCT) (Config)#exit
7. Verify the configuration.
(QCT) #show ip access-lists 101
ACL ID: 101
Inbound VLAN ID(s): 100
Sequence Number: 1
Action.........................................
deny
Match
All......................................
FALSE
Protocol.......................................
6(tcp)
Destination L4 Port Keyword.................... 80(www/http)
Time Range Name................................ work-hours
Rule
Status....................................
inactive
4.4. Control Plane Policing (CoPP)
Control plane policing (CoPP) uses access control list (ACL) rules to create filters for a system’s control plane.
That filter prevents traffic not specifically identified as legitimate from reaching the system control plane,
rate-limits, traffic to an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS traffic,
giving priority to important control plane and management traffic. CoPP uses a dedicated control plane
configuration through the ACL command line interfaces (CLIs) to provide filtering and rate-limiting
capabilities for the control plane packets.
To Next Page
Loading...
Need help?
General