Cisco SFE2000P User Manual

5-14
Cisco SCE 2000 4xGBE Installation and Configuration Guide
OL-7824-06
Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration
Initial System Configuration
Each individual IP address can be configured to be permitted or denied access.
Order of Entries
The order of the entries in the list is important. The entries in the list are tested sequentially, and the
action is determined by the first entry that matches the connecting IP address. Therefore, when the entry
“any” appears in an Access Control List, all succeeding entries are irrelevant.
Consider two hypothetical ACLs containing the same entries in a different order.
The following list would permit access to all IP addresses, including 10.1.1.0:
permit any
deny 10.1.1.0
Note that the above list could not actually be created using the setup utility, since after the “any” entry,
no other entries could be added to the list. The following list will deny access to IP address 10.1.1.0, but
permit access to all others:
deny 10.1.1.0
permit any
If no entry in the assigned Access Control List matches the connection, or if the Access Control List is
empty, the default action is deny.
SUMMARY STEPS
1. Enter the Access Control Lists configuration menu.
2. You have the option of creating or modifying Access Control Lists, or skipping this section and
proceeding directly to assign the existing ACLs to the desired management interfaces.
3. Type the number of the Access Control List to be configured (1 through 99) and press Enter.
4. Begin adding entries to the selected list.
5. Type the IP address to be added to this list, and press Enter.
6. If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and
press Enter. (See Entry Formats (on page 5-13).)
7. The maximum number of entries in an ACL is 20.
8. When all entries are added to one list, you are asked whether you would like to create another ACL.
You may define up to 99 ACLs.
9. Restrict IP access to the SCE 2000 by assigning the appropriate ACL.
10. Restrict Telnet access to the SCE 2000 by assigning the appropriate ACL.
Table 5-2 IP address/Wildcard bit examples
Initial IP address Wildcard bits
Range
Wildcard bits Range Range
10.1.1.0 0.0.0.255 10.1.1.0–10.1.1.255
10.1.1.0 0.0.0.63 10.1.1.0–10.1.1.63
10.1.1.0 0.0.0.0 10.1.1.0 (individual entry)

Cisco SFE2000P Specifications

General

Brand	Cisco
Model	SFE2000P
Category	Network Router
Language	English