![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275409.webp)
Using Access Control Lists (ACLs)
December 2000
13 - 21
NOTE:
The only valid commands that are valid in the ACL list are the
access-list
and
end
commands. The
Foundry device ignores other commands in the file.
To modify an ACL by configuring an ACL list on a file server:
1.
Use a text editor to create a new text file. When you name the file, use 8.3 format (up to eight characters in
the name and up to three characters in the extension).
NOTE:
Make sure the Foundry device has network access to
the TFTP server.
2.
Optionally, clear the ACL entries from the ACLs you are changing by placing commands such as the following
at the top of the file:
no access-list 1
no access-list 101
When you load the ACL list into the device, the software adds the ACL entries in the file after any entries that
already exist in the same ACLs. Thus, if you intend to entirely replace an ACL, you must use the
no access-list
<num> command to clear the entries from the ACL before the new ones are added.
3.
Place the commands to create the ACL entries into the file. The order of the separate ACLs does not matter,
but the order of the entries within each ACL is important. The software applies the entries in an ACL in the
order they are listed within the ACL. Here is an example of some ACL entries:
access-list 1 deny host 209.157.22.26 log
access-list 1 deny 209.157.22.0 0.0.0.255 log
access-list 1 permit any
access-list 101 deny tcp any any eq http log
The software will apply the entries in ACL 1 in the order shown and stop at the first match. Thus, if a packet
is denied by one of the first three entries, the packet will not be permitted by the fourth entry, even if the
packet matches the comparison values in this entry.
4.
Enter the command “
end
” on a separate line at the end of the file. This command indicates to the software
that the entire ACL list has been read from the file.
5.
Save the text file.
6.
On the Foundry device, enter the following command at the Privileged EXEC level of the CLI:
copy tftp running-config
<tftp-ip-addr> <filename>
NOTE:
This command will be unsuccessful if you place any commands other than
access-list
and
end
(at
the end only) in the file. These are the only commands that are valid in a file you load using the
copy tftp
running-config…
command.
7.
To save the changes to the device’s startup-config file, enter the following command at the Privileged EXEC
level of the CLI:
write memory
Here is a complete example of an ACL configuration file.
no access-list 1
no access-list 101
access-list 1 deny host 209.157.22.26 log
access-list 1 deny 209.157.22.0 0.0.0.255 log
access-list 1 permit any
access-list 101 deny tcp any any eq http log
end
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...