Enterasys SecureStack C2

access-list (standard)
18-76 Security Configuration
Parameters
Defaults
Ifnumberisnotspecified,theentiretableofaccesslistswillbedisplayed.
Mode
Anyroutermode.
Example
ThisexampleshowshowtodisplayIPaccesslistnumber101.Thisisanextendedaccesslist,
whichpermitsordeniesICMP,UDPandIPframesbasedonrestrictionsconfiguredwiththeone
oftheaccess‐listcommands.Fordetailsonconfiguringstandardaccesslists,referto“access‐list
(standard)”
onpage 18‐71.Fordetailsonconfiguringextendedaccesslists,referto“access‐list
(extended)”onpage 18‐73
.
C2(su)->router#show access-lists 101
Extended IP access list 101
1: permit icmp host 18.2.32.130 any
2: permit udp host 198.92.32.130 host 171.68.225.126
3: deny ip 150.136.0.0 0.0.255.255 224.0.0.0 15.255.255.255
4: deny ip 11.6.0.0 0.1.255.255 224.0.0.0 15.255.255.255
5: deny ip 172.24.24.0 0.0.1.255 224.0.0.0 15.255.255.255
access-list (standard)
UsethiscommandtodefineastandardIPaccesslistbynumberwhenoperatinginroutermode.
Thenoformofthiscommandremovesthedefinedaccesslistorentry.
Syntax
To create an ACL entry:
access-list access-list-number {deny | permit} source [source-wildcard]
no access-list access-list-number [entry]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
access‐list‐
number
(Optional)Displaysaccesslistinformationforaspecificaccesslistnumber.
Validvaluesarebetween1and199.
access‐list‐
number
Specifiesastandardaccesslistnumber.Validvaluesarefrom1to99.
deny|permit Deniesorpermitsaccessifspecifiedconditionsaremet.