Cisco SGE2000 Configuration Guide - Page 78

SUMMARY STEPS, Order of Entries

Get Cisco SGE2000 PDF manuals and user guides View all Cisco SGE2000 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 78 highlights

Initial System Configuration Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration Each individual IP address can be configured to be permitted or denied access. Table 5-2 IP address/Wildcard bit examples Initial IP address Wildcard bits Range 10.1.1.0 10.1.1.0 10.1.1.0 Wildcard bits Range 0.0.0.255 0.0.0.63 0.0.0.0 Range 10.1.1.0-10.1.1.255 10.1.1.0-10.1.1.63 10.1.1.0 (individual entry) Order of Entries The order of the entries in the list is important. The entries in the list are tested sequentially, and the action is determined by the first entry that matches the connecting IP address. Therefore, when the entry "any" appears in an Access Control List, all succeeding entries are irrelevant. Consider two hypothetical ACLs containing the same entries in a different order. The following list would permit access to all IP addresses, including 10.1.1.0: permit any deny 10.1.1.0 Note that the above list could not actually be created using the setup utility, since after the "any" entry, no other entries could be added to the list. The following list will deny access to IP address 10.1.1.0, but permit access to all others: deny 10.1.1.0 permit any If no entry in the assigned Access Control List matches the connection, or if the Access Control List is empty, the default action is deny. SUMMARY STEPS 1. Enter the Access Control Lists configuration menu. 2. You have the option of creating or modifying Access Control Lists, or skipping this section and proceeding directly to assign the existing ACLs to the desired management interfaces. 3. Type the number of the Access Control List to be configured (1 through 99) and press Enter. 4. Begin adding entries to the selected list. 5. Type the IP address to be added to this list, and press Enter. 6. If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and press Enter. (See Entry Formats (on page 5-13).) 7. The maximum number of entries in an ACL is 20. 8. When all entries are added to one list, you are asked whether you would like to create another ACL. You may define up to 99 ACLs. 9. Restrict IP access to the SCE 2000 by assigning the appropriate ACL. 10. Restrict Telnet access to the SCE 2000 by assigning the appropriate ACL. 5-14 Cisco SCE 2000 4xGBE Installation and Configuration Guide OL-7824-06

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
5-14
Cisco SCE 2000 4xGBE Installation and Configuration Guide
OL-7824-06
Chapter 5
Connecting the Management Interfaces and Performing Initial System Configuration
Initial System Configuration
Each individual IP address can be configured to be permitted or denied access.
Order of Entries
The order of the entries in the list is important. The entries in the list are tested sequentially, and the
action is determined by the first entry that matches the connecting IP address. Therefore, when the entry
“any” appears in an Access Control List, all succeeding entries are irrelevant.
Consider two hypothetical ACLs containing the same entries in a different order.
The following list would permit access to all IP addresses, including 10.1.1.0:
permit any
deny 10.1.1.0
Note that the above list could not actually be created using the setup utility, since after the “any” entry,
no other entries could be added to the list. The following list will deny access to IP address 10.1.1.0, but
permit access to all others:
deny 10.1.1.0
permit any
If no entry in the assigned Access Control List matches the connection, or if the Access Control List is
empty, the default action is
deny
.
SUMMARY STEPS
1.
Enter the Access Control Lists configuration menu.
2.
You have the option of creating or modifying Access Control Lists, or skipping this section and
proceeding directly to assign the existing ACLs to the desired management interfaces.
3.
Type the number of the Access Control List to be configured (1 through 99) and press Enter.
4.
Begin adding entries to the selected list.
5.
Type the IP address to be added to this list, and press Enter.
6.
If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and
press Enter. (See Entry Formats (on page 5-13).)
7.
The maximum number of entries in an ACL is 20.
8.
When all entries are added to one list, you are asked whether you would like to create another ACL.
You may define up to 99 ACLs.
9.
Restrict IP access to the
SCE 2000
by assigning the appropriate ACL.
10.
Restrict Telnet access to the
SCE 2000
by assigning the appropriate ACL.
Table 5-2
IP address/Wildcard bit
examples
Initial IP address Wildcard bits
Range
Wildcard bits Range
Range
10.1.1.0
0.0.0.255
10.1.1.0–10.1.1.255
10.1.1.0
0.0.0.63
10.1.1.0–10.1.1.63
10.1.1.0
0.0.0.0
10.1.1.0 (individual entry)