Cisco CSS11501 - 100Mbps Ethernet Load Balancing Device, Configuration Manual

Page: 257 / 432

C-65
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-05
Appendix C Command Summary
Configuration Command Set
Note Configuring an access list automatically sets up an implied
access denial. For example, if you have set up an access list
containing the IP addresses of remote hosts allowed to
access the appliance, all other IP addresses have access
denied. If you configure a single access list denying access
from IP addresses in that list, all other IP addresses are
denied access as well.
Note Access lists can be configured while the device is in FIPS
Mode; however, they can only be assigned to the SNMP
subsystem. Access lists can be assigned to other subsystems
when the device is returned to normal operation.
Examples The following example specifies the host with the IP address 10.1.2.3 to be the
only remote host to configure the Secure Content Accelerator.
access-list 2 permit 100.1.2.3 0.0.0.0
The following example specifies only remote hosts on the identified subnet can
configure the Secure Content Accelerator.
access-list 1 permit 100.128.0.0 0.0.255.255
Related Commands
show access-list (Privileged Command Set)
snmp access-list (Configuration Command Set)
telnet access-list (Configuration Command Set)
web-mgmt access-list (Configuration Command Set)
clock
Allows the administrator to set the date or time.
clock <date|time>