Cisco Catalyst 2960 Series, Руководство по настройке

Страница: 1276 / 2288

SUMMARY STEPS
1.
enable
2. show ip access-lists access-list-name
3.
configure terminal
4.
ip access-list extended access-list-name
5. no [ sequence-number ] permit protocol source source-wildcard destination destination-wildcard [ option
option-name ] [ precedence precedence ][ tos tos ] [ log ] [ time-range time-range-name ] [ fragments ]
6.
[ sequence-number ] permit protocol source source-wildcard [ operator port [ port ]] destination
destination-wildcard [ operator port [ port ]] [ option option-name ] [ precedence precedence ][ tos tos ] [ log ]
[ time-range time-range-name ] [ fragments ]
7.
Repeat Steps 5 and 6 as necessary, adding permit or deny statements to consolidate access list entries
where possible. Use the no sequence-number command to delete an entry.
8.
end
9. show ip access-lists access-list-name
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. enable Step 1
Example:
Device> enable
• Enter your password if prompted.
(Optional) Displays the contents of the IP access list. show ip access-lists access-list-name Step 2
Example:
Device# show ip access-lists mylist1
• Review the output to see if you can consolidate any
access list entries.
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 3
Specifies the IP access list by name and enters named access
list configuration mode. ip access-list extended access-list-name
Example:
Device(config)# ip access-list extended mylist1
Step 4
Removes the redundant access list entry that can be
consolidated. no [ sequence-number ] permit protocol source
source-wildcard destination destination-wildcard [ option
Step 5
option-name ] [ precedence precedence ][ tos tos ] [ log ]
[
time-range time-range-name
] [
fragments
]
• Repeat this step to remove entries to be consolidated
because only the port numbers differ.
Example:
Device(config-ext-nacl)# no 10
• After this step is repeated to remove the access list
entries 20, 30, and 40, for example, those entries are
removed because they will be consolidated into one
permit statement.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1194
How to Configure ACLs