Cisco Catalyst 2960 Series, Configuration Manual

Page: 1485 / 2288

DETAILED STEPS
Purpose Command or Action
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 1
Defines the default port ACL. access-list access-list-number { deny | permit
} { hostname | any | host } log
Step 2
The access-list-number is a decimal number from 1 to 99 or 1300 to
1999.
Example:
Switch(config)# access-list 1 deny any
log
Enter deny or permit to specify whether to deny or permit access if
conditions are matched.
The source is the source address of the network or host that sends a
packet, such as this:
• hostname : The 32-bit quantity in dotted-decimal format.
• any : The keyword any as an abbreviation for source and
source-wildcard value of 0.0.0.0 255.255.255.255. You do not
need to enter a source-wildcard value.
• host : The keyword host as an abbreviation for source and
source-wildcard of source 0.0.0.0.
(Optional) Applies the source-wildcard wildcard bits to the source.
(Optional) Enters log to cause an informational logging message about
the packet that matches the entry to be sent to the console.
Enters interface configuration mode. interface interface-id
Example:
Switch(config)# interface
Step 3
gigabitethernet2/0/2
Configures the default ACL on the port in the input direction. ip access-group acl-id in
Step 4
Example:
Switch(config-if)#
ip access-group
The acl-id is an access list name or
number.
Note
default_acl in
Returns to global configuration mode.
exit
Example:
Switch(config-if)# exit
Step 5
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1403
How to Configure 802.1x Port-Based Authentication