![background image](http://html.mh-extra.com/html/smc-networks/6152pl2-fiche/6152pl2-fiche_management-manual_1300644181.webp)
General Security Measures
3-125
3
Configuring a Standard IPv4 ACL
Command Attributes
•
Action
– An ACL can contain any combination of permit or deny rules.
•
Address Type
– Specifies the source IP address. Use “Any” to include all possible
addresses, “Host” to specify a specific host address in the Address field, or “IP” to
specify a range of addresses with the Address and SubMask fields. (Options: Any,
Host, IP; Default: Any)
•
IP Address
– Source IP address.
•
Subnet Mask
– A subnet mask containing four integers from 0 to 255, each
separated by a period. The mask uses 1 bits to indicate “match” and 0 bits to
indicate “ignore.” The mask is bitwise ANDed with the specified source IP address,
and compared with the address for each IP packet entering the port(s) to which this
ACL has been assigned.
Web
– Specify the action (i.e., Permit or Deny). Select the address type (Any, Host,
or IP). If you select “Host,” enter a specific address. If you select “IP,” enter a subnet
address and the mask for an address range. Then click Add.
Figure 3-75 ACL Configuration - Standard IPv4
CLI
– This example configures one permit rule for the specific address 10.1.1.21
and another rule for the address range 168.92.16.x – 168.92.31.x using a bitmask.
Configuring an Extended IPv4 ACL
Command Attributes
•
Action
– An ACL can contain any combination of permit or deny rules.
•
Source/Destination Address Type
– Specifies the source or destination IP
address. Use “Any” to include all possible addresses, “Host” to specify a specific
Console(config-std-acl)#permit host 10.1.1.21
4-202
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#
Summary of Contents for 6152PL2 FICHE
Page 2: ......
Page 6: ...vi ...
Page 8: ...viii ...
Page 32: ...Tables xxxii ...
Page 38: ...Figures xxxviii ...
Page 56: ...Initial Configuration 2 10 2 ...
Page 378: ...Configuring the Switch 3 322 3 ...
Page 817: ......