Enterasys SecureStack C2 C2G170-24

Configuring Access Lists
SecureStack C2 Configuration Guide 23-75
Configuring Access Lists
Purpose
Toreviewandconfiguresecurityaccesscontrollists(ACLs),whichpermitordenyaccessto
routinginterfacesbasedonprotocolandIPaddressrestrictions.
Commands
show access-lists
UsethiscommandtodisplayconfiguredIPaccesslistswhenoperatinginroutermode.
Syntax
showaccess‐lists[number]
Parameters
Defaults
Ifnumberisnotspecified,theentiretableofaccesslistswillbedisplayed.
Mode
Anyroutermode.
Example
ThisexampleshowshowtodisplayIPaccesslistnumber101.Thisisanextendedaccesslist,
whichpermitsordeniesICMP,UDPandIPframesbasedonrestrictionsconfiguredwiththeone
oftheaccess‐listcommands.Fordetailsonconfiguringstandardaccesslists,referto“access‐list
Router: These commands can be executed when the device is in router mode only. For details
on how to enable router configuration modes, refer to “Enabling Router Configuration Modes” on
page 18-2.
Note: Access Control Lists are limited to 100 per stack and 9 per interface on C2 stack
configurations, or mixed configurations of C2 and C3 switches in a stack. On C3-only
configurations, up to 100 Access Control Lists with up to 20 access rules per list and 60 per
interface are supported per stack .
For information about... Refer to page...
show access-lists 23-75
access-list (standard) 23-76
access-list (extended) 23-77
ip access-group 23-79
access‐list‐
number
(Optional)Displaysaccesslistinformationforaspecificaccesslistnum ber.
Validvaluesarebetween1and199.