779
cannot exceed 16-character long.
Command Mode:
Global mode
Default:
No time-range configuration
Guide:
Examples:
Reate a time-range named dc timer.
Switch(config)#Time-range dc_ti
19.3 ACL Example
Scenario:
The user has the following configuration requirement: port 1/10 of the switch connects to
10.0.0.0/24 segment, ftp is not desired for the user.
Configuration description:
a) Create a proper ACL
b) Configuring packet filtering function
c) Bind the ACL to the port
The configuration steps are listed below:
Switch(Config)#access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch(Config)#firewall enable
Switch(Config)#firewall default permit
Switch(Config)#interface ethernet 1/10
Switch(Config-Ethernet1/10)#ip access-group 110 in
Switch(Config-Ethernet1/10)#exit
Switch(Config)#exit
Configuration result.:
Switch#show firewall
Firewall Status: Enable.
Firewall Default Rule: Permit.
Switch#show access-lists
access-list 110(used 1 time(s))
access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch#show access-group interface ethernet 1/10
interface name:Ethernet1/10
the ingress acl use in firewall is 110.
