Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration
Initial System Configuration
SCE 2000 4xGBE Installation and Configuration Guide
5-16
OL-7824-02
E
XAMPLE
:
This example illustrates a common access control scenario. Let us assume the following:
•
We want to permit every station to access the SCE on the management port (e.g. ping, SNMP
polling etc.).
•
We want to restrict Telnet access to only a few permitted stations.
We therefore need to create two access control lists:
•
For general IP access: permit access to all IP addresses.
•
For Telnet: permit access to the specified IP address, and deny to all others.
ACL #1 = permit any IP address. Assign to IP access.
ACL #2 = permit access to 10.1.1.0, 10.10.10.1, deny to all others. Assign to Telnet access.
Would you like to enter the Access lists configuration menu? [no]:
y
Would you like create new Access lists or modify existing lists? [no]:
y
Enter ACL number:
1
Does this entry permit access? [yes]:
Enter IP address or the word ‘any’ to denote any IP address:
any
This entry matches every IP address, no use in adding more entries to this
list.
Would you like to configure another list? [no]:
y
Enter ACL number:
2
Does this entry permit access? [yes]:
Enter IP address or the word ‘any’ to denote any IP address:
10.1.1.0
Enter wildcard bits
: 0.0.0.0
Would you like to add another entry to this list? [no]:y
Does this entry permit access? [yes]:
Enter IP address or the word ‘any’ to denote any IP address:
10.10.10.1
Enter wildcard bits
: 0.0.0.0
Would you like to add another entry to this list? [no]:y
Does this entry permit access? [yes]:
n
Enter IP address or the word ‘any’ to denote any IP address:
any
This entry matches every IP address, no use in adding more entries to this
list.
Would you like to configure another list? [no]:
Enter IP access-class [0]:
1
Enter Telnet access-class [0]:
2
E
XAMPLE
2:
This example skips the first section of the dialog (creating/modifying), and proceeds directly to
assign existing ACLs.
Would you like to enter the Access lists configuration menu? [no]:
y
Would you like create new Access lists or modify existing lists? [no]:
Enter IP access-class [0]:
10
Enter Telnet access-class [0]:
22
