You can configure 9999 access lists in the router. Access lists whose identifiers take a value between 1 and 99 are
Standard Access Lists. Extended Access Lists take a value between 100 and 1999 and those between 5000 and
9999 are Stateful Access Lists.
The 9999 access lists are empty by default. An access list is considered empty when it does not contain any entries.
Depending on the type of list created (Standard/Extended/Stateful), entry configurations are carried out in a submenu
containing the same parameters for all entries of the same type. The following sections describe the configuration
mode for all parameters contained in these submenus.
Non-configured entry parameters or options in the Access Control Lists will not be taken into account when checking
the access.
Note
The order of the entries in the Access Control List is very important if the information the sentences
refer to stretches over different entries.
You must bear in mind that the order in which the entries in a list are dealt with is not defined by the
entry identifier number, but by the order in which they have been introduced. This order can be seen
through the list command and modified with the move-entry command. When moving through the list,
beginning with the first listed element or entry, if an element is found that matches the search criteria,
no further search is carried out and the action indicated by said entry is executed.
Please note that the search order among the entries on an Access Control List DIFFERS from that
used in a Prefix List (please see manual
bintec Dm780-I Prefix Lists
). In the latter case, this order is
given by the value of the identifier.
The following commands are available in the main Access Control menu:
Command
Function
? (HELP)
Lists the available commands or their options.
ACCESS-LIST
Configures an access list.
LIST
Displays the configuration of the access lists.
NO
Negates a command or sets the default value.
2.3.1 ? (HELP)
Lists the valid commands at the level where the router is programmed. You can also use this command after a spe-
cific command to list the available options.
Syntax:
Access Lists config>?
Example:
Access Lists config>?
access-list
Configure an access-list
list
Display access-lists configuration
no
Negates a command or sets its defaults
exit
Access Lists config>
2.3.2 ACCESS-LIST
Accesses the submenu that allows you to configure entries in an access list. Access lists are identified by a numeric-
al value that can take values between 1 and 9999 (i.e. the router allows you to configure 9999 access lists). Access
lists whose identifiers take a value between 1 and 99 are Standard Access Lists. Extended Access Lists take a value
between 100 and 1999, while those taking a value between 5000 and 9999 are Stateful Access Lists.
Once you have entered this command, followed by an identifier, you access a submenu where you can configure an
access list for said identifier. The type of access list and its identifier will appear in the new prompt.
Syntax:
Access Lists config>access-list ?
<1..99>
Standard Access List number (1-99)
<100..1999>
Extended Access List number (100-1999)
bintec elmeg
2 Configuration
Access Control
5