Configuring ACL Configuration Example for ACL
User Guide
841
Figure 3-30 Binding the ACL to Port 1/0/2
8) Click to save the settings.
3.3.4 Using the CLI
1) Create a Combined ACL.
Switch#configure
Switch(config)#access-list create 1000 name ACL_Telnet
2) Configure rule 5 to permit packets with the source MAC address 6C-62-6D-F5-BA-48
and destination port TCP 23 (Telnet service port).
Switch(config)#access-list combined 1000 rule 5 permit logging disable smac
6C:62:6D:F5:BA: 48 smask FF: FF: FF: FF: FF: FF type 0800 protocol 6 d-port 23 d-port-
mask FFFF
3) Configure rule 15 to deny all the packets except the packet with source MAC address
6C-62-6D-F5-BA-48, and destination port TCP 23 (Telnet service port).
Switch(config)#access-list combined 1000 rule 15 deny logging disable type 0800
protocol 6 d-port 23 d-port-mask FFFF
4) Configure rule 25 to permit all the packets. The rule makes sure that all devices can get
other network services normally.
Switch(config)#access-list combined 1000 rule 25 permit logging disable type 0800
protocol 6 d-port 23 d-port-mask FFFF
5) Bind ACL500 to port 1/0/2.
Switch(config)#access-list bind 500 interface gigabitEthernet 1/0/2
Switch(config)#end
Switch#copy running-config startup-config
To Next Page
Loading...
