Cisco IE 4000, Руководство по настройке программного обеспечения

Страница: 563 / 1066

559
Configuring Network Security with ACLs
How to Configure Network Security with ACLs
Creating Named Standard and Extended ACLs
Using Time Ranges with ACLs
Repeat the steps if you have multiple items that you want in effect at different times.
Command Purpose
1. configure terminal Enters global configuration mode.
2. ip access-list standard name
or
ip access-list extended name
Defines a standard IPv4 access list using a name, and enters
access-list configuration mode.
The name can be a number from 1 to 99.
or
Defines an extended IPv4 access list using a name, and enters
access-list configuration mode.
The name can be a number from 100 to 199.
3. {deny | permit} { source [ source-wildcard ] |
host source | any } [ log ]
or
{ deny | permit } protocol { source
[ source-wildcard ] | host source | any }
{ destination [ destination-wildcard ] | host
destination | any } [ precedence precedence ]
[ tos tos ] [ established ] [ log ] [ time-range
time-range-name ]
In access-list configuration mode, specifies one or more
conditions denied or permitted to decide if the packet is forwarded
or dropped.

host source —A source and source wildcard of source 0.0.0.0.

any —A source and source wildcard of 0.0.0.0
255.255.255.255.
or
In access-list configuration mode, specify the conditions allowed
or denied. Use the
log keyword to get access list logging
messages, including violations.
See Creating a Numbered Extended ACL, page 555 for definitions
of protocols and other keywords.

host source —A source and source wildcard of source 0.0.0.0.

host destination —A destination and destination wildcard of
destination 0.0.0.0.

any —A source and source wildcard or destination and
destination wildcard of 0.0.0.0 255.255.255.255.
4. end Returns to privileged EXEC mode.