Cisco SCE 1000 and Краткое руководство по эксплуатации - Страница 25
Просмотреть онлайн или скачать pdf Краткое руководство по эксплуатации для Сетевое оборудование Cisco SCE 1000 and. Cisco SCE 1000 and 49 страниц. Service control engine 1000 2xgbe
Печатать страницу
When all entries are added to one list, you are asked whether you would like to create another ACL. You may define
Step 8
up to 99 ACLs.
To create another ACL, type
–
Would you like to configure another list? [no]: y
Enter up to 20 IP addresses in this new ACL, as described in step 5 and step 6.
–
When all ACLs have been created, press Enter.
–
Would you like to configure another list? [no]:
You are now prompted to assign the desired ACLs to restrict IP and Telnet access.
–
Restrict IP access to the SCE 1000 by assigning the appropriate ACL.
Step 9
Type the number of the ACL to be assigned to IP access and press Enter.
To accept the default ACL, press Enter.
Enter IP access-class [0]:
Step 10 Restrict Telnet access to the SCE 1000 by assigning the appropriate ACL.
Type the number of the ACL to be assigned to the Telnet interface and press Enter.
To accept the default ACL, press
Enter Telnet access-class [0]: 2
Examples
Example 1:
This example illustrates a common access control scenario. Let us assume the following:
• We want to permit every station to access the SCE platform on the management port (for example ping, SNMP polling etc.).
• We want to restrict Telnet access to only a few permitted stations.
We therefore need to create two access control lists:
• For general IP access — permit access to all IP addresses.
• For Telnet — permit access to the specified IP address, and deny to all others.
ACL #1 = permit any IP address. Assign to IP access.
ACL #2 = permit access to 10.1.1.0, 10.10.10.1, deny to all others. Assign to Telnet access.
Would you like to enter the Access lists configuration menu? [no]: y
Would you like to create new Access lists or modify existing lists? [no]: y
Enter ACL number: 1
Does this entry permit access? [yes]:
Enter IP address or the word 'any' to denote any IP address: any
This entry matches every IP address, no use in adding more entries to this list.
Would you like to configure another list? [no]: y
Enter ACL number: 2
Does this entry permit access? [yes]:
Enter IP address or the word 'any' to denote any IP address: 10.1.1.0
Enter wildcard bits: 0.0.0.0
Would you like to add another entry to this list? [no]:y
Does this entry permit access? [yes]:
Enter IP address or the word 'any' to denote any IP address: 10.10.10.1
Enter wildcard bits: 0.0.0.0
Would you like to add another entry to this list? [no]:y
Does this entry permit access? [yes]:n
Enter IP address or the word 'any' to denote any IP address: any
This entry matches every IP address, no use in adding more entries to this list.
Would you like to configure another list? [no]:
Enter IP access-class [0]: 1
Enter Telnet access-class [0]: 2
and press Enter.
y
.
Enter
25