Cisco Systems 78-11741-02 manual DRP Server Agent Example, Numbered Access List Examples, IPC-122

Configuring IP Services

IP Services Configuration Examples

ip address 128.9.1.2 transmit-interface ethernet 1

!

interface ethernet 1 ip address 128.9.1.2

!

!use show interfaces command to find router1-MAC-address-E1 arp 128.9.1.1 router1-MAC-address-E1 arpa

DRP Server Agent Example

The following example enables the DRP Server Agent. Sources of DRP queries are limited by access list 1, which permits only queries from the host at address 33.45.12.4. Authentication is also configured for the DRP queries and responses.

ip drp server

access-list 1 permit 33.45.12.4 ip drp access-group 1

ip drp authentication key-chain mktg key chain mktg

key 1

key-string internal

Numbered Access List Examples

In the following example, network 36.0.0.0 is a Class A network whose second octet specifies a subnet; that is, its subnet mask is 255.255.0.0. The third and fourth octets of a network 36.0.0.0 address specify a particular host. Using access list 2, the Cisco IOS software would accept one address on subnet 48 and reject all others on that subnet. The last line of the list shows that the software would accept addresses on all other network 36.0.0.0 subnets.

access-list 2 permit 36.48.0.3 access-list 2 deny 36.48.0.0 0.0.255.255 access-list 2 permit 36.0.0.0 0.255.255.255 interface ethernet 0

ip access-group 2 in

The following example defines access lists 1 and 2, both of which have logging enabled:

interface ethernet 0

ip address 1.1.1.1 255.0.0.0 ip access-group 1 in

ip access-group 2 out

!

access-list 1 permit 5.6.0.0 0.0.255.255 log access-list 1 deny 7.9.0.0 0.0.255.255 log

!

access-list 2 permit 1.2.3.4 log access-list 2 deny 1.2.0.0 0.0.255.255 log

If the interface receives 10 packets from 5.6.7.7 and 14 packets from 1.2.23.21, the first log will look like the following:

list 1 permit 5.6.7.7 1 packet list 2 deny 1.2.23.21 1 packet

Five minutes later, the console will receive the following log:

list 1 permit 5.6.7.7 9 packets list 2 deny 1.2.23.21 13 packets

Cisco IOS IP Configuration Guide

IPC-122