Cisco Catalyst 2960-XR User Manual

Switch(config-ext-nacl)# deny tcp host 171.69.2.88 any eq telnet
IPv4 ACL Configuration Examples
This section provides examples of configuring and applying IPv4 ACLs. For detailed information about
compiling ACLs, see the Cisco IOS Security Configuration Guide, Release 12.4 and to the Configuring IP
Services” section in the “IP Addressing and Services” chapter of the Cisco IOS IP Configuration Guide, Release
12.4.
ACLs in a Small Networked Office
This shows a small networked office environment with routed Port 2 connected to Server A, containing benefits
and other information that all employees can access, and routed Port 1 connected to Server B, containing
confidential payroll data. All users can access Server A, but Server B has restricted access.
Figure 5: Using Router ACLs to Control Traffic
Use router ACLs to do this in one of two ways:
•
Create a standard ACL, and filter traffic coming to the server from Port 1.
•
Create an extended ACL, and filter traffic coming from the server into Port 1.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
142 OL-29434-01
Configuring IPv4 ACLs
IPv4 ACL Configuration Examples

Cisco Catalyst 2960-XR Specifications

General

Brand	Cisco
Model	Catalyst 2960-XR
Category	Switch
Language	English