Chapter 6 Control Configuration
Configuring the Available Interfaces
SCE 1000 2xGBE Release 2.0.10 User Guide
6-4 OL-7117-02
Step 2 The SCE 1000(config)# prompt appears.
Step 3 To configure one IP address type:
access-list number permit x.x.x.x and press Enter where x.x.x.x is the
IP address.
Step 4 To configure more than one IP address type:
access-list number permit x.x.x.x y.y.y.y and press Enter.
This command configures a range of addresses in the format x.x.x.x y.y.y.y
where x.x.x.x specifies the prefix bits common to all IP addresses in the range, and
y.y.y.y is a wildcard-bits mask specifying the bits that are ignored. In this notation,
‘1’ means bits to ignore.
EXAMPLE:
The following example adds an entry to the access list number 1, that permits access only to IP
addresses in the range of 10.1.1.0–10.1.1.255.
SCE 1000(config)#access-list 1 permit 10.1.1.0 0.0.0.255
You can also add addresses from which you deny service, by using the deny rather than the
permit switch. You can create up to 99 different address lists, which can be associated with
access to the interfaces.
When you add a new entry to an ACL, it is always added to the end of the Access-List.
Removing an Access List
To remove an Access List (with all its entries):
Step 1 From the SCE 1000(config)# prompt, type no access-list number permit/deny,
and press Enter.
The Access List and all of its entries are removed.
Defining the Global Access List
To define an Access List as the global list for permitting or denying all traffic to the SCE 1000:
Step 1 From the SCE 1000(config)# prompt, type ip access-class number, and press
Enter.
Comments to this Manuals