Cisco SCE 1000 and Technical Information download pdf (Page 29)

• Individual IP address: Type the desired IP address, then enter the wildcard bits 0.0.0.0.

Each individual IP address can be configured to be permitted or denied access.

Table 5-2 IP address/Wildcard bit examples

Initial IP address Wildcard bits Range

10.1.1.0 0.0.0.255 10.1.1.0–10.1.1.255

10.1.1.0 0.0.0.63 10.1.1.0–10.1.1.63

10.1.1.0 0.0.0.0 10.1.1.0 (individual entry)

Order of Entries

The order of the entries in the list is important. The entries in the list are tested sequentially, and the action is determined

by the first entry that matches the connecting IP address. Therefore, when the entry “any” appears in an Access Control

List, all succeeding entries are irrelevant.

Consider two hypothetical ACLs containing the same entries in a different order.

The following list would permit access to all IP addresses, including 10.1.1.0:

permit any

deny 10.1.1.0

Note that the above list could not actually be created using the setup utility, since after the “any” entry, no other entries

could be added to the list.

The following list will deny access to IP address 10.1.1.0, but permit access to all others:

deny 10.1.1.0

permit any

If no entry in the assigned Access Control List matches the connection, or if the Access Control List is empty, the default

action is deny.

To create the access control lists, complete the following steps:

Step 1 Enter the Access Control Lists configuration menu.

Would you like to enter the Access lists configuration menu? [no]: y

Type y and press Enter.

The Access Control Lists configuration dialog begins.

Step 2

You have the option of creating or modifying Access Control Lists, or skipping this section and proceeding

directly to assign the existing ACLs to the desired management interfaces.

Would you like to create new Access lists or modify existing lists? [no]: y

If you choose not to create or edit Access Control Lists, skip to Step 9: Configuring the Topology-Dependent Parameters.

Step 3

Type the number of the Access Control List to be configured (1 through 99) and press Enter.

Note that there is no default for this parameter.

1 2 ... 24 25 26 27 28 29 30 31 32 33 34 ... 57 58

No comments

Cisco SCE 1000 and Technical Information Page 29