Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration

Initial System Configuration

Enter RDR-formatter destination’s IP address: 10.1.1.230

Enter RDR-formatter destination’s TCP port number: 33000

Step 7: ConfiguringAccess Control Lists (ACLs)

The SCE 1000 can be configured with Access Control Lists (ACLs), which are used to permit or deny incoming connections on any of the management interfaces.

Note ACL #0 is a pre-defined list that permits access to all IP addresses.

Configuration of access control lists is done in two stages:

Step 1 Create the access control lists.

You may create 99 ACLs with a maximum of 20 entries per list. Each entry consists of an IP address, and an indication of whether access is permitted or denied to this IP address.

Step 2 Assign the ACLs to the appropriate management interface. (See Step 9: Configuring the Topology-Dependent Parameters (on page 5-18).)

The dialog permits you to skip the creation/editing of the ACLs and go directly to assigning ACLs to the management interfaces.

Entry Formats

Each ACL may permit/deny access to any IP address, one or more ranges of IP addresses, or one or more individual IP address. Three entry formats are available to support these options:

Any IP address — Type the word “any”. Any IP address will be permitted or denied access.

Range of IP addresses — Type the beginning IP address in the desired range, then enter the wildcard bits that define the range.

This wildcard functions like a reverse mask, in that all “1” bits in the wildcard indicate the corresponding bit in the IP address should be ignored. All other bits must match the corresponding bit in the specified IP address. Refer to the table below for examples.

Each range of IP addresses can be configured to be permitted or denied access.

Individual IP address — Type the desired IP address, then enter the wildcard bits 0.0.0.0. Each individual IP address can be configured to be permitted or denied access.

Table 5-2 IP address/Wildcard bit examples

 

 

 

Initial IP address

Wildcard bits

Range

 

 

 

 

 

 

 

10.1.1.0

0.0.0.255

10.1.1.0–10.1.1.255

 

 

 

 

 

 

10.1.1.0

0.0.0.63

10.1.1.0–10.1.1.63

 

 

 

 

 

 

10.1.1.0

0.0.0.0

10.1.1.0 (individual entry)

 

 

 

 

 

 

 

 

 

 

Cisco SCE 1000 2xGBE Installation and Configuration Guide

 

 

 

 

 

 

 

 

 

 

 

5-12

 

 

 

 

OL-7821-04

 

 

 

 

 

 

 

 

 

Page 74
Image 74
Cisco Systems OL-7821-04 manual ConfiguringAccess Control Lists ACLs, Entry Formats, Initial IP address Wildcard bits Range

SCE 1000 2xGBE, OL-7821-04 specifications

Cisco Systems OL-7821-04, SCE 1000 2xGBE is an advanced network service appliance designed to deliver superior performance and reliability for service providers seeking to optimize their networks. This compact yet powerful device is integral in addressing the growing demands of data traffic in telecommunications and data centers.

One of the standout features of the SCE 1000 is its ability to support both IPv4 and IPv6 networks, ensuring compatibility with current and future networking protocols. This dual-stack capability empowers service providers to seamlessly transition and integrate next-generation applications without jeopardizing service quality.

The SCE 1000 is equipped with two Gigabit Ethernet (GbE) ports that enhance its connectivity options and allow for increased bandwidth. This dual-port configuration supports high-speed data transfers and streamlined operations, making it ideal for enterprises with substantial networking demands. Its flexible interface options facilitate easy integration into existing network architectures without requiring extensive reconfiguration.

An essential characteristic of the SCE 1000 is its advanced service creation technology, which allows for dynamic traffic management. This feature intelligently prioritizes and optimizes applications, ensuring that critical services receive the bandwidth they need while maintaining overall network efficiency. Service providers can leverage this capability to implement Quality of Service (QoS) policies, delivering a consistent user experience even during peak usage times.

Furthermore, the SCE 1000 supports various traffic engineering methods, including deep packet inspection and application recognition, enabling operators to monitor and control network traffic effectively. This capability is particularly crucial in identifying and mitigating potential network threats, resulting in enhanced security measures.

With its robust architecture, the device also offers scalability, accommodating the growing network requirements of service providers. As businesses grow and data use expands, the SCE 1000 can adapt without compromising performance.

In summary, the Cisco Systems OL-7821-04, SCE 1000 2xGBE is a versatile network service appliance that combines high performance, advanced service creation technology, and strong security features. It stands out as an essential tool for service providers aiming to enhance their network capabilities and deliver superior services to customers. Its dual GbE ports, IPv4/IPv6 support, and dynamic traffic management make it a reliable choice for organizations anticipating significant data growth.