Cisco Catalyst 2960 Series, Руководство по настройке

Страница: 1267 / 2288

Purpose Command or Action
(Optional) Saves your entries in the configuration file. copy running-config startup-config
Example:
Switch#
copy running-config
Step 6
startup-config
Creating a Numbered Extended ACL
Follow these steps to create a numbered extended ACL:
SUMMARY STEPS
1. configure terminal
2.
access-list access-list-number { deny | permit } protocol source source-wildcard destination
destination-wildcard [
precedence precedence
] [
tos
tos] [
fragments
] [
log
[
log-input
] [
time-range
time-range-name ] [
dscp dscp
]
3. access-list access-list-number { deny | permit } tcp source source-wildcard [ operator port ] destination
destination-wildcard [ operator port ] [ established ] [ precedence precedence ] [ tos tos ] [ fragments ] [ log
[
log-input
] [
time-range time-range-name
] [
dscp dscp
] [ flag ]
4.
access-list access-list-number { deny | permit } udp source source-wildcard [
operator port
]
destination
destination-wildcard [ operator port ] [ precedence precedence ] [ tos tos ] [ fragments ] [ log [ log-input ]
[ time-range time-range-name ] [ dscp dscp ]
5.
access-list access-list-number { deny | permit } icmp source source-wildcard destination
destination-wildcard [ icmp-type | [[ icmp-type icmp-code ] | [ icmp-message ]] [ precedence precedence ]
[ tos tos ] [ fragments ] [ time-range time-range-name ] [ dscp dscp ]
6.
access-list access-list-number
{
deny
|
permit
}
igmp source source-wildcard destination
destination-wildcard [ igmp-type ] [
precedence precedence
] [
tos tos
] [
fragments
] [
log
[
log-input
]
[ time-range time-range-name ] [ dscp dscp ]
7. end
DETAILED STEPS
Purpose Command or Action
Enters the global configuration mode.
configure terminal
Example:
Switch# configure terminal
Step 1
Defines an extended IPv4 access list and the access conditions.
access-list access-list-number
{
deny
|
permit } protocol source source-wildcard
Step 2
The access-list-number is a decimal number from 100 to 199 or 2000 to 2699.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1185
How to Configure ACLs