748
a) Create a standard IP access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries.
c) Exit ACL Configuration Mode
（
8
）
Configuring a numbered extended MAC-IP access-list
（
9
）
Configuring a standard MAC-IP access-list based on nomenclature
a) Create a standard MAC-IP access-list based on nomenclature
b) Specify multiple “permit” or “deny” rule entries.
c) Exit MAC-IP Configuration Mode
2. Configuring the packet filtering function
(1) Enable global packet filtering function
(2) Configure default action.
3. Configuring time range function
(1) Create the name of the time range
(2) Configure periodic time range
(3) Configure absolute time range
4. Bind access-list to a specific direction of the specified port.
5. Clear the filting information of the specificed port
1. Configuring access-list
(1) Configuring a numbered standard IP access-list
Command Explanation
Global Mode
access-list <num> {deny | permit} {{<sIpAddr>
<sMask>} | any | {host <sIpAddr>}}
no access-list <num>
Creates a numbered standard
IP access-list, if the access-list
already exists, then a rule will
add to the current access-list;
the “
no access-list
<num>
“ command deletes a
numbered standard IP
access-list.
(2) Configuring a numbered extensive IP access-list
Command Explanation
Global Mode
