Access Control Lists
3-75
3
Setting the ACL Name and Type
Use the ACL Configuration page to designate the name and type of an ACL.
Command Attributes
• Name – Name of the ACL. (Maximum length: 16 characters)
• Type – There are three filtering modes:
- Standard: IP ACL mode that filters packets based on the source IP address.
- Extended: IP ACL mode that filters packets based on source or destination IP
address, as well as protocol type and protocol port number. If the “TCP” protocol
is specified, then you can also filter packets based on the TCP control code.
- MAC: MAC ACL mode that filters packets based on the source or destination
MAC address and the Ethernet frame type (RFC 1060).
Web – Click Security, ACL, ACL Configuration. Enter an ACL name in the Name
field, select the list type (IP Standard, IP Extended, or MAC), and click Add to open
the configuration page for the new list.
Figure 3-46. Naming and Choosing ACLs
CLI – This example creates a standard IP ACL named bill.
Configuring a Standard IP ACL
Command Attributes
• Action – An ACL can contain permit rules, deny rules, or a combination of both.
(Default: Permit rules)
• Address Type –
Specifies the source IP address. Use “Any” to include all possible
addresses, “Host” to specify a specific host address in the Address field, or “IP” to
specify a range of addresses with the Address and SubMask fields. (Options: Any, Host,
IP; Default: Any)
• IP Address – Specifies the source IP address.
Console(config)#access-list ip standard bill 4-113
Console(config-std-acl)#
To Next Page
Loading...
Need help?
General