周一至周五工作时间不允许访问23端口
 
time-range worktime 07:30 to 11:00working-day
time-range worktime 13:30 to 17:00 working-day
 
acl number 3000
rule 1 deny tcp source any destination-portrange 23 time-range work
firewall enable
int e3/1
firewall packet-filter 3000 inbound