542 Configuring Access Control Lists
Figure 21-14. IP ACL Example Network Diagram
To configure the switch:
1
Create an ACL named list1 and configures a rule for the ACL that permits
packets carrying TCP traffic that matches the specified Source IP address
(192.168.77.0/24), and sends these packets to the specified Destination IP
address (192.168.77.50).
console#config
console(config)#access-list list1 permit tcp
192.168.77.0 0.0.0.255 192.168.77.50 0.0.0.0
2
Define the rule to set similar conditions for UDP traffic as for TCP traffic.
console(config)#access-list list1 permit udp
192.168.77.0 0.0.0.255 192.168.77.3 0.0.0.255
console(config)#exit
192.168.77.1 192.168.77.2 192.168.77.3 192.168.77.4
Layer 2 Switch
PowerConnect Switch (Layer 3)
Port Te 1/0/2
UDP or TCP packet to
192.168.88.50 rejected:
Dest. IP not in range.
UDP or TCP packet to
192.168.77.50 permitted:
Dest. IP in range.
To Next Page
Loading...
