Configuring the Switch
3-68
3
3. Explicit default rule (permit any any) in the ingress IP ACL for ingress ports.
4. If no explicit rule is matched, the implicit default is permit all.
Setting the ACL Name and Type
Use the ACL Configuration page to designate the name and type of an ACL.
Command Attributes
• Name – Name of the ACL. (Maximum length: 15 characters)
• Type – There are three filtering modes:
- Standard – IP ACL mode that filters packets based on the source IP address.
- Extended – IP ACL mode that filters packets based on source or destination IP
address, as well as protocol type and protocol port number.
- MAC – MAC ACL mode that filters packets based on the source or destination
MAC address and the Ethernet frame type (RFC 1060).
Web – Select Security, ACL, Configuration. Enter an ACL name in the Name field,
select the list type (IP Standard, IP Extended, or MAC), and click Add to open the
configuration page for the new list.
Figure 3-43 Selecting ACL Type
CLI – This example creates a standard IP ACL named david.
Console(config)#access-list ip standard david 4-90
Console(config-std-acl)#
To Next Page
Loading...
