Alcatel 9000 Podręcznik Użytkownika Pobierz pdf (Strona 502)

100

101

Configuring ACLs Using ACL Manager

page 25-18 OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Aclman(config)#access-list 102 deny ip host 178.4.25.1 any

Aclman(config)#access-list 102 permit udp any any

Aclman(config)#access-list 102 deny udp host 178.4.25.1 any

To remove a numbered ACL, use the no form of the access-list command. Note that removing a single

entry from a standard ACL is not allowed without deleting the entire ACL. To avoid having to re-enter an

entire ACL each time a change is required, use one of the following configuration methods:

• Create a named ACL instead of a numbered ACL. Removing individual ACL entries is allowed with-

out having to remove and re-enter the entire ACL. See “Configuring Named Standard and Extended

ACLs” on page 25-19 for more information.

• Create the numbered ACL configuration in a text file and use the Privileged Exec Mode import

command to load the text file syntax into the ACLMAN running configuration. Then each time a

change is required for this ACL, simply edit the text file and import the file contents into the

ACLMAN configuration. For more information about importing ACL text files, see “Importing ACL

Text Files” on page 25-21.

Configuring Named Standard and Extended ACLs

The ip access-list command in the Global Configuration Mode is used to create standard or extended

ACLs that are associated with a name. The standard and extended parameters available with this

command are used to specify the ACL type. For example, the following command creates a standard ACL

named “Test1” and an Extended ACL named “Test2”.

Aclman(config)#ip access-list standard Test1

Aclman#(config)#ip access-list extended Test2

The ip access-list command also invokes the Access List Configuration Mode, which is used to create

ACL entries for the named ACL. For example:

Aclman(config)#ip access-list standard Test1

Aclman(config-std-nacl#permit any

Aclman(config-std-nacl)#deny host 12.255.10.58

Aclman(config-std-nacl)#exit

Aclman(config)#

Note that it is possible to add and remove named ACL entries without having to delete and re-enter the

entire ACL configuration. For example:

Aclman(config)#ip access-list extended Test2

Aclman(config-ext-nacl)#permit ip any any

Aclman(config-ext-nacl)#permit udp host 198.172.10.4 any

Aclman(config-ext-nacl)#permit tcp host 11.22.3.1 any

Aclman(config-ext-nacl)#end

Aclman#show ip access-list Test2

Extended IP access list Test2

10 permit ip any any

20 permit udp host 198.172.10.4 any

30 permit tcp host 11.22.3.1 any

Aclman#configure terminal

Aclman(config)#ip access-list extended Test2

Aclman(config-ext-nacl)#no permit ip any any

Aclman(config-ext-nacl)#permit ip any 172.10.5.0 0.0.255.255

Aclman(config-ext-nacl)#end

1 2 ... 497 498 499 500 501 502 503 504 505 506 507 ... 701 702

Komentarze do niniejszej Instrukcji

Brak uwag

Alcatel 9000 Podręcznik Użytkownika Strona 502

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Alcatel 9000