ID
Local Address --> Remote Address
Timeout
Firewall
NAPT
1
172.24.70.1 --> 172.24.70.2
0
NO
NO
This identifies a specific connection between a router’s local address and a remote one (the rest of the parameters
are not considered). We will now define an entry in the Access Control List using the identifier for this connection ( 1)
as a sentence:
Extended Access List 100>entry 10 connection 1
2.5.2.14 ENTRY <id> DESCRIPTION
Adds a text description to an entry to better understand its purpose (or for later use).
Syntax:
Extended Access List 1>entry <id> description ?
<1..64 chars>
Description text
Example:
Extended Access List 100>entry 1 description “first entry”
Extended Access List 100>
2.5.3 LIST
Displays the information on the Access Control List configuration that is being edited (i.e. the list whose identifier ap-
pears at the menu prompt).
Syntax:
Extended Access List #>list ?
all-entries
Display any entry of this access-list
address-filter-entries
Display the entries that match an ip address
entry
Display one entry of this access-list
2.5.3.1 LIST ALL-ENTRIES
Displays all the Access Control List configurations entries (i.e. the whole configuration).
Syntax:
Extended Access List #>list all-entries
Example:
Extended Access List 100>list all-entries
Extended Access List 100, assigned to no protocol
1
PERMIT
SRC=172.25.54.33/32
DES=192.34.0.0/16
Conn:0
PROT=21
2
DENY
SRC=0.0.0.0/0
DES=0.0.0.0/0
Conn:0
Extended Access List 100>
2.5.3.2 LIST ADDRESS-FILTER-ENTRIES
Displays the Access Control List configuration entries that contain a specific IP address.
Syntax:
Extended Access List #>list address-filter-entries <address> <subnet>
Example:
Extended Access List 100>list address-filter-entries 172.25.54.33 255.255.255.255
Extended Access List 100, assigned to no protocol
1
PERMIT
SRC=172.25.54.33/32
DES=192.34.0.0/16
Conn:0
PROT=21
Extended Access List 100>
2.5.3.3 LIST ENTRY
Displays a configuration entry for the Access Control List identified after the command.
2 Configuration
bintec elmeg
20
Access Control
