44.4.3 Configuration of Showing Expert
Extended Access Lists
To monitor access lists, please run the following command the in privileged user mode:
DGS-3610# show access-lists [id | name]
You can view expert access lists
44.4.4 Expert Extended Access List Example
You can implement the following security functions by configuring expert access lists:
The 0013.2049.8272 host using vlan 20 cannot access the giga 0/1 port of a device.
It cannot access other ports.
DGS-3610> enable
DGS-3610# config terminal
DGS-3610(config)# expert access-list extended expert-list
DGS-3610(config-exp-nacl)# permit ip vid 20 any host 0013.2049.8272 any any
DGS-3610(config-exp-nacl)# deny any any any any
DGS-3610(config-exp-nacl)# exit
DGS-3610(config)# interface gigabitEthernet 0/1
DGS-3610(config-if)# expert access-group expert-list in
DGS-3610(config-if)# end
DGS-3610# show access-lists
expert access-list extended expert-list
permit ip vid 20 any host 0013.2049.8272 any any
deny any any
44.5 Configuring IPv6 Extended
Access List
44.5.1 Configuring IPv6 Extended Access
List
The configuration of an IPv6 access list includes the following steps:
1. Define an IPv6 access list
2. Apply the access list to a specific interface (application particular case)
There is the following method to configure a basic access list. Run the following command in
the ACL configuration mode:
To Next Page
Loading...
Need help?
General