174
Access Control List Configuration
Figure 19-2: Deny a Specific Subnet on an Interface
The commands that have to be entered are listed below. The commands access the SmartNode device
via a Telnet session running on a host with IP address 172.16.2.13, which accesses the SmartNode via
IP interface
lan
.
SN(cfg)#
profile acl Jamming
SN(pf-acl)[Jamming]#
deny ip 172.16.2.0 0.0.0.255 172.16.1.0 0.0.0.255
SN(pf-acl)[Jamming]#
permit ip any any
SN(pf-acl)[Jamming]#
exit
SN(cfg)#
context ip router
SN(cfg-ip)[router]#
interface lan
SN(if-ip)[lan]#
use profile acl Jamming in
Software Configuration Guide, Revision 1.03