
A-29
File Transfers
Transferring ACL Command Files
Transferring ACL Command Files
This section describes how to upload and execute a command file to the
switch for configuring or replacing an Access Control List (ACL) in the switch
configuration. Such files should contain only ACE (Access Control Entry)
commands. For more on this general topic, including an example of an ACL
command file created offline, refer to the section titled “Editing ACLs and
Creating an ACL Offline” in the “Access Control Lists (ACLs)” chapter of the
latest
Access Security Guide
for your switch.
TFTP: Uploading an ACL Command File from a TFTP Server
For example, suppose you:
1.
Created an ACL command file named
vlan10_in.txt
to update an existing
ACL.
2.
Copied the file to a TFTP server at 18.38.124.16.
Syntax:
copy tftp command-file <
ip-addr
> <
filename.
txt > < unix | pc >
where:
<
ip-addr
>
=
The IP address of a TFTP server available
to the switch
<
filename.txt
>
=
A text file containing ACL commands
and stored in the TFTP directory of
the server identified by
<
ip-addr
>
< unix | pc >
=
The type of workstation used for serial,
Telnet, or SSH access to the switch CLI
This command copies and executes the named text file from
the specified TFTP server address and executes the ACL
commands in the file. Depending on the ACL commands used,
this action does one of the following in the running-config file:
■
Creates a new ACL.
■
Replaces an existing ACL. (Refer to “Creating an ACL
Offline” in the “Access Control Lists (ACLs)” chapter in
the latest
Access Security Guide
for your switch.)
■
Adds to an existing ACL.
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 29 Monday, January 28, 2008 10:04 AM