Cisco Catalyst 2960 Series, Руководство по настройке

Страница: 1271 / 2288

Purpose Command or Action
Enters the global configuration mode. configure terminal
Example:
Switch#
configure terminal
Step 2
Defines a standard IPv4 access list using a name, and enter
access-list configuration mode. ip access-list standard name
Example:
Switch(config)# ip access-list standard 20
Step 3
The name can be a number from 1 to 99.
In access-list configuration mode, specify one or more
conditions denied or permitted to decide if the packet is
forwarded or dropped. Use one of the following:
Step 4
• deny { source [ source-wildcard ] | host source | any }
[ log ]
•
host source
—
A source and source wildcard of
source 0.0.0.0.
• permit { source [ source-wildcard ] | host source |
any } [ log ]
•
any
—
A source and source wildcard of 0.0.0.0
255.255.255.255.
Example:
Switch(config-std-nacl)# deny 192.168.0.0
0.0.255.255 255.255.0.0 0.0.255.255
or
Switch(config-std-nacl)#
permit 10.108.0.0
0.0.0.0 255.255.255.0 0.0.0.0
Returns to privileged EXEC mode.
end
Example:
Switch(config-std-nacl)# end
Step 5
Verifies your entries. show running-config
Example:
Switch# show running-config
Step 6
(Optional) Saves your entries in the configuration file.
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 7
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1189
How to Configure ACLs