Cisco NM-8B-U User Guide - Page 92
no access-list, con terminal, permit, remark, copy running-config startup-config, Step 1
UPC - 074632001001
View all Cisco NM-8B-U manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 92 highlights
Configuration Tasks 16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Beginning in privileged EXEC mode, follow these steps to create an IP extended ACL for IP traffic: Step 1 Step 2 Command configure terminal access-list access-list-number {deny | permit | remark} protocol {source source-wildcard | host source | any}[operator port] {destination destination-wildcard | host destination | any} [operator port] Step 3 Step 4 Step 5 end show access-lists copy running-config startup-config Purpose Enters global configuration mode. Creates an IP extended ACL, repeating the command as many times as necessary. For access-list-number, enter the ACL number. The range is 100 to 199 and 2000 to 2699. Enter deny or permit to specify whether to deny or permit access if conditions are matched. For protocol, enter the name or number of an IP protocol. Use the question mark (?) to see a list of available protocol keywords. For source, enter the network or host from which the packet is being sent. You specify this by using dotted decimal notation by using the any keyword as an abbreviation for source 0.0.0.0 source-wildcard 255.255.255.255, or by using the host keyword for source 0.0.0.0. For source-wildcard, enter the wildcard bits by placing ones in the bit positions that you want to ignore. You specify the wildcard by using dotted decimal notation, by using the any keyword as an abbreviation for source 0.0.0.0 source-wildcard 255.255.255.255, or by using the host keyword for source 0.0.0.0. For destination, enter the network or host to which the packet is being sent. You have the same options for specifying the destination and destination-wildcard as those described by source and source-wildcard. Defines a destination or source port. • The operator can be only eq (equal). • If operator is after source source-wildcard, conditions match when the source port matches the defined port. • If operator is after destination destination-wildcard, conditions match when the destination port matches the defined port. • The port is a decimal number or name of a TCP or UDP port. The number can be from 0 to 65535. • Use TCP port names only for TCP traffic. • Use UDP port names only for UDP traffic. Note Deny statements are not supported for QoS ACLS. See the "Classification Based on QoS ACLs" section on page 32 for more details. Returns to privileged EXEC mode. Verifies your entries. (Optional) Saves your entries in the configuration file. To delete an ACL, use the no access-list access-list-number global configuration command. Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ 92