Asante Technologies IC36240 user manual Creating an Access List with a Name, Access-list ?

6.4.4 Creating an Access List with a Name

From the global configuration mode, you can also create access lists. Using the Switch(config)#ip command you can name your access list, rather than using a number. The new prompt reflects the named access list mode.

Switch(config)# ip ?

access-list		Named access-list
forward-protocol		Controls forwarding of physical and directed IP
prefix-list		Build a prefix list
route		Establish static routes
Switch(config)# ip		access-list ?
standard	Standard Access List
extended	Extended Access List
Switch(config)# ip		access-list standard ?

WORD	Access-list name or Standard IP access-list number <1-99>
Switch(config)# ip access-list standard test
Switch(config-std-nacl)# ?
deny	Specify packets to reject
end	End current mode and change to enable mode
exit	Exit current mode and down to previous mode
help	Description of the interactive help system
no	Negate a command or set its defaults
permit	Specify packets to forward
quit	Exit current mode and down to previous mode
remark	Access list entry comment
show	Show running system information
write	Write running configuration to memory, network, or terminal

Switch(config-std-nacl)#

At the Switch(config-std-nacl)#prompt, you configure the access list permit or deny statements.

6.4.5 Applying an Access List to an Interface

After creating your access lists, you must apply them to an interface in order to enable the access list. Enter the interface configuration mode for the desired interface. Each interface may have only one access list applied to it at one time. Apply the access lists to either inbound traffic or to outbound traffic.

The following example shows creating an extended access list that only allows SMTP traffic (port 25) to be sent out, and denies all other traffic.

Switch(config)# access-list 101 permit tcp 192.168.123.0 0.0.0.255 any eq 25 Switch(config)# access-list 101 deny any

Switch(config)# interface eth1 Switch(config-if-eth1)# ip ?

access-group Apply an access-group entry Switch(config-if-eth1)# ip access-group ?

WORD access-list number or name Switch(config-if-eth1)# ip access-group 101 ?

in inbound direction out outbound direction

Switch(config-if-eth1)# ip access-group 101 out Switch(config-if-eth1)# exit

63 Asante IntraCore IC36240 User’s Manual