Security Configuration Command Set
Configuring Access Lists
14-96
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide
Examples
This example shows how to define access list 101 to deny ICMP transmissions from any source and
for any destination:
This example shows how to define access list 102 to deny TCP packets transmitted from IP source
10.1.2.1 with a port number of 42 to any destination:
14.3.7.4 ip access-group
Use this command to apply access restrictions on an interface when operating in router mode.
ip access-group access-list-number
{
in
|
out
}
Syntax Description
Command Syntax of the “no” Form
The “no” form of this
command removes the specified access list:
no ip access-group access-list-number
{
in
|
out
}
Command Type
Router command.
Command Mode
Interface configuration:
Matrix>Router(config-if(Vlan <vlan_id>))#
Matrix>Router(config)#
access-list 101 deny ICMP any any
Matrix>Router(config)#
access-list
102 deny TCP host 10.1.2.1 eq 42 any
ROUTER:
This command can be executed when the device is in
router mode
only.
For details on how to enable router configuration modes, refer to
Section 3.3.3
.
access-list-number
Specifies the number of the access list to be applied to the
access list. This is a decimal number from
1
to
199
.
in
Filters inbound packets.
out
Filters outbound packets.
Содержание 1G58x-09
Страница 1: ...Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide Firmware Version 3 07 xx P N 9033755 22 ...
Страница 2: ......
Страница 26: ...Contents xxiv Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide ...
Страница 28: ...Figures xxvi Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide ...
Страница 36: ...Typographical and Keystroke Conventions xxxiv Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide ...
Страница 40: ...Getting Help 1 4 Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide ...
Страница 286: ...SNMP Command Set Basic SNMP Trap Configuration 5 64 Matrix E1 Series 1G58x 09 and 1H582 xx Configuration Guide ...
