Hirschmann MACH 4000 Series, User Manual

Page: 96 / 236

Protection from unauthorized access
96
6.6 Access Control Lists (ACL)
Basic - L3P
Release 3.1 06/07
enable
configure
Switch to the privileged EXEC mode.
Switch to the configuration mode.
mac access-list extended
ipx-apple
deny any any ipx
deny any any appletalk
permit any any
exit
Create the extended ACL „ipx-apple“
Add the rule „deny IPX“ to the list .
Add the rule „deny AppleTalk“ to the list.
Add the rule „permit all other data“ to the list.
Switch to the configuration mode.
mac access-group ipx-apple
in
exit
show mac access-lists
Attach ACL „ipx-apple“ to all interfaces.
Switch to the privileged EXEC mode.
Display MAC ACLs.
MAC ACL Name Rules Direction Interface(s)
------------------------------- ----- --------- ------------------
ipx-apple 3 inbound 1/1,1/2,1/3,1/4,2/
1,2/2,2/3,2/4,3/1,3/2
show access-lists interface 1/1 in
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
MAC ipx-apple 1