access-list (standard) Configuring Access Control Lists
Enterasys C3 Configuration Guide 34-5
Parameters
Defaults
If insert, replace or move are not specified, the new entry will be appended to the access list.
If source2 is not specified with move, only one entry will be moved.
Mode
Global configuration: C3(su)->router(Config)#
Usage
Valid access list numbers for standard ACLs are 1 to 99. For extended ACLs, valid values are 100
to 199.
Standard access lists are applied to VLAN interfaces by using the
ip access-group command
(page 34-12) and to ports with the access-list interface command (page 34-14).
All access lists have an implicit “deny any any” statment as their last entry.
Examples
This example shows how to create access list 1 with three entries that allow access to only those
hosts on the three specified networks. The wildcard bits apply to the host portions of the network
access-list-number
[entryno [entryno]]
Specifies a standard access list number. Valid values are from 1 to 99.
When using the no access-list command, you can delete a whole access-list,
or only specific entries in the list with the optional entryno parameter.
Specify a range of entries by entering the start and end entry numbers.
deny | permit Denies or permits access if specified conditions are met.
source Specifies the network or host from which the packet will be sent. Valid
options for expressing source are:
• IP address or range of addresses (A.B.C.D)
• any - Any source host
• host source - IP address of a single source host
source-wildcard (Optional) Specifies the bits to ignore in the source address. A 0 indicates the
address bits that must be considered (matched), while a 255 indicates the
bits that can be ignored.
insert | replace
entryno
(Optional) Inserts this new entry before a specified entry in an existing ACL,
or replaces a specified entry with this new entry.
move destination
source1 source2
(Optional) Moves a sequence of access list entries before another entry.
Destination is the number of the existing entry before which this new entry
will be moved. Source1 is a single entry number or the first entry number in
the range to be moved. Source2 (optional) is the last entry number in the
range to be moved. If source2 is not specified, only the source1 entry will be
moved.
assign-queue
queue-id
(Optional) Specifies the queue to which a packet matching the permit rule
will be assigned. Valid values for queue-id are from 0 to 5.
To Next Page
Loading...
Need help?
General