Cabletron Systems SmartSwitch 8-slot, User'S Reference Manual

Page: 139 / 150

Chapter 9: Security Configuration Guide
SSR User Reference Manual 9 - 15
The first copy command downloads the file acl.changes from a TFTP server and puts
the commands into the temporary configuration area, scratchpad. The administrator
can re-examine the changes if necessary before committing the changes to the running
system. The second copy command make the changes take effect by copying from the
scratchpad to the active running system.
If the administrator needs to re-order or modify the ACL rules, one must make the
changes in the acl.changes file on the remote host, download the changes and make
them effective again.
Maintaining ACLs using the ACL Editor
In addition to the traditional method of maintaining ACLs using TFTP or RCP, the SSR
provides a simpler and more user-friendly mechanism to maintain ACL: the ACL
Editor.
The ACL Editor can only be accessed within Configure mode using the
acl-edit
command. You can specify the ACL you want to edit by specifying its
name together with the
acl-edit
command. For example, to edit ACL “101”, you
issue the command
acl-edit 101
. The only restriction is that when you edit a
particular ACL, you cannot add rules for a different ACL. You can only add new rules
for the ACL that you are currently editing. When the editing session is over, that is,
when you are done making changes to the ACL, you can save the changes and make
them take effect immediately. Within the ACL editor, you can add new rules (
add
command), delete existing rules (
delete
command) and re-order the rules (
move
command). To save the changes, use the
save
command or simply exit the editor.
If you edit and save changes to an ACL that is currently being used or applied to an
interface, the changes will take effect immediately. There is no need to remove the
ACL from the interface before making changes and re-apply after changes are made.
The whole process is automatic.
Configure ACL
To configure an ACL, perform the following tasks:
1. Determine the access control criteria you want to impose on traffic going to or
through the router.
2. Determine where (which interface) you want to set up these controls.