Hirschmann MACH 4000 User Manual

Protection from unauthorized access
22
6.6 Access Control Lists (ACL).
Basic - L3P
Release 4.0 11/07
access-list 100 deny ip
10.0.1.11 0.0.0.0
10.0.1.158 0.0.0.0
access-list 100 permit ip
any any
Create the extended ACL 100 with the first rule.
This denies data traffic from IP source address
10.0.1.11 to the IP destination address 10.0.1.158.
Add another rule to the ACL 100. This permits data
traffic from any IP source address to any IP desti-
nation address.
access-list 110 deny ip
10.0.1.13 0.0.0.0
10.0.1.158 0.0.0.0
access-list 110 permit ip
any any
Create the extended ACL 110 with the first rule.
This denies data traffic from IP source address
10.0.1.13 to the IP destination address 10.0.1.158.
Add another rule to the ACL 110. This permits data
traffic from any IP source address to any IP desti-
nation address.
exit Switch to the Priviledged EXEC mode.
show ip access-lists 100 Displays the rules of ACL 100.
ACL ID: 100
Rule Number: 1
Action......................................... deny
Match All...................................... FALSE
Protocol....................................... 255(ip)
Source IP Address.............................. 10.0.1.11
Source IP Mask................................. 0.0.0.0
Destination IP Address......................... 10.0.1.158
Destination IP Mask............................ 0.0.0.0
Rule Number: 2
Action......................................... permit
Match All...................................... TRUE
configure Switch to the Configuration mode.
interface 2/3 Switch to the Interface Configuration mode of
interface 2.3.
ip access-group 100 in
Attaches ACL 100 to interface 2.3 for received da-
ta.
exit Switch to the Configuration mode.
interface 3/1 Switch to the interface configuration mode of inter-
face 3.1.
ip access-group 110 in Attaches ACL 110 to interface 3.1 for received da-
ta.
exit Switch to the Configuration mode.
exit Switch to the Priviledged EXEC mode.
show access-lists interface 2/3 in
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
IP 100 1

Hirschmann MACH 4000 Specifications

General

Brand	Hirschmann
Model	MACH 4000
Category	Network Router
Language	English