Hirschmann MACH 4000 Series, User Manual

Page: 99 / 236

Protection from unauthorized access
Basic - L3P
Release 3.1 06/07
6.6 Access Control Lists (ACL)
99
configure
interface 2/1
ip access-group 102 in
exit
exit
show access-lists interface
2/1 in
Switch to the configuration mode.
Switch to the interface configuration mode for
Interface 2/1.
Attach ACL 102 to interface 2/1.
Switch to the configuration mode.
Switch to the privileged EXEC mode.
Display the ACLs attached to interface 2/1 for
incoming data.
show access-lists interface 2/1 in
ACL Type ACL ID Sequence Number
-------- ------------------------------- ---------------
IP 100 1
IP 102 3
Example: Extended ACL with prioritizing using the Simple Network
Management protocol (Layer 4)
enable
configure
Switch to the privileged EXEC mode.
Switch to the configuration mode.
access-list 104 permit udp
any any eq snmp assign
-queue 5
Create the extended ACL 104 with the firs rule,
This rule assigns the priority t to all frames (=161) .
This rule overwrites any priority contained in a
VLAN tag with the value 5.
exit
show ip access-lists 104
Switch to the privileged EXEC mode.
Display the rules of ACL 104.
show ip access-lists 104
ACL ID: 104
Rule Number: 1
Action......................................... permit
Match All...................................... FALSE
Protocol....................................... 17(udp)
Destination L4 Port Keyword.................... 161(snmp)
Assign Queue................................... 5