Dell PowerConnect M6220 Configuration Guide - Page 94

Example #1: Create an ACL and Define an ACL Rule, Example #2: Define the Second Rule for ACL 179

Page 94 highlights

Layer 3 Switch Port 1/0/2 ACL 179 UDP or TCP packet to 192.168.88.3 rejected: Dest. IP not in range Layer 2 Switch UDP or TCP packet to 192.168.77.3 accepted: Dest. IP in range 192.168.77.1 192.168.77.4 192.168.77.9 192.168.77.2 Figure 5-2. IP ACL Example Network Diagram Example #1: Create an ACL and Define an ACL Rule This command creates an ACL named list1 and configures a rule for the ACL. After the mask has been applied, it permits packets carrying TCP traffic that matches the specified Source IP address, and sends these packets to the specified Destination IP address. console#config console(config)#access-list list1 permit tcp 192.168.77.0 0.0.0.255 192.168.77.3 0.0.0.0 Example #2: Define the Second Rule for ACL 179 Define the rule to set similar conditions for UDP traffic as for TCP traffic. console(config)#access-list list1 permit udp 192.168.77.0 0.0.0.255 192.168.77.3 0.0.0.255 console(config)#exit 94 Device Security

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126

94
Device Security
Figure 5-2.
IP ACL Example Network Diagram
Example #1: Create an ACL and Define an ACL Rule
This command creates an ACL named list1 and configures a rule for the ACL. After the mask has been
applied, it permits packets carrying TCP traffic that matches the specified Source IP address, and sends
these packets to the specified Destination IP address.
console#config
console(config)#access-list list1 permit tcp 192.168.77.0 0.0.0.255 192.168.77.3
0.0.0.0
Example #2: Define the Second Rule for ACL 179
Define the rule to set similar conditions for UDP traffic as for TCP traffic.
console(config)#access-list list1 permit udp 192.168.77.0 0.0.0.255 192.168.77.3
0.0.0.255
console(config)#exit
Port 1/0/2
ACL 179
192.168.77.1
192.168.77.2
192.168.77.9
192.168.77.4
UDP or TCP packet to
192.168.77.3 accepted:
Dest. IP in range
UDP or TCP packet to
192.168.88.3 rejected:
Dest. IP not in range
Layer 2
Switch
Layer 3 Switch