Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration

Initial System Configuration

Order of Entries

The order of the entries in the list is important. The entries in the list are tested sequentially, and the action is determined by the first entry that matches the connecting IP address. Therefore, when the entry “any” appears in an Access Control List, all succeeding entries are irrelevant.

Consider two hypothetical ACLs containing the same entries in a different order. The following list would permit access to all IP addresses, including 10.1.1.0:

permit any deny 10.1.1.0

Note that the above list could not actually be created using the setup utility, since after the “any” entry, no other entries could be added to the list.

The following list will deny access to IP address 10.1.1.0, but permit access to all others:

deny 10.1.1.0 permit any

If no entry in the assigned Access Control List matches the connection, or if the Access Control List is empty, the default action is deny.

To create the access control lists, complete the following steps:

Step 1 Enter the Access Control Lists configuration menu.

Would you like to enter the Access lists configuration menu? [no]: y

Type y and press Enter.

The Access Control Lists configuration dialog begins.

Step 2 You have the option of creating or modifying Access Control Lists, or skipping this section and

proceeding directly to assign the existing ACLs to the desired management interfaces.

Would you like to create new Access lists or modify existing lists? [no]: y

If you choose not to create or edit Access Control Lists, skip to Step 9: Configuring the Topology- Dependent Parameters (on page 5-18).

Step 3 Type the number of the Access Control List to be configured (1 through 99) and press Enter. Note that there is no default for this parameter.

Step 4 Begin adding entries to the selected list.

Indicate whether this entry is permitted access or denied access.

•To permit access press Enter.

•To deny access type n and press Enter.

Does this entry permit access? [yes]:

Step 5 Type the IP address to be added to this list, and press Enter.

Type “any” and press Enter to include any IP address in the ACL.

Note that there is no default for this parameter.

Enter IP address or the word ‘any’ to denote any IP address:

Cisco SCE 1000 2xGBE Installation and Configuration Guide

 

OL-7821-04

5-13

 

 

 

Page 74 Page 76
Page 75
Image 75
Cisco Systems SCE 1000 2xGBE, OL-7821-04 manual Order of Entries, Deny 10.1.1.0 permit any
Page 74 Page 76

SCE 1000 2xGBE, OL-7821-04 specifications

Cisco Systems OL-7821-04, SCE 1000 2xGBE is an advanced network service appliance designed to deliver superior performance and reliability for service providers seeking to optimize their networks. This compact yet powerful device is integral in addressing the growing demands of data traffic in telecommunications and data centers.

One of the standout features of the SCE 1000 is its ability to support both IPv4 and IPv6 networks, ensuring compatibility with current and future networking protocols. This dual-stack capability empowers service providers to seamlessly transition and integrate next-generation applications without jeopardizing service quality.

The SCE 1000 is equipped with two Gigabit Ethernet (GbE) ports that enhance its connectivity options and allow for increased bandwidth. This dual-port configuration supports high-speed data transfers and streamlined operations, making it ideal for enterprises with substantial networking demands. Its flexible interface options facilitate easy integration into existing network architectures without requiring extensive reconfiguration.

An essential characteristic of the SCE 1000 is its advanced service creation technology, which allows for dynamic traffic management. This feature intelligently prioritizes and optimizes applications, ensuring that critical services receive the bandwidth they need while maintaining overall network efficiency. Service providers can leverage this capability to implement Quality of Service (QoS) policies, delivering a consistent user experience even during peak usage times.

Furthermore, the SCE 1000 supports various traffic engineering methods, including deep packet inspection and application recognition, enabling operators to monitor and control network traffic effectively. This capability is particularly crucial in identifying and mitigating potential network threats, resulting in enhanced security measures.

With its robust architecture, the device also offers scalability, accommodating the growing network requirements of service providers. As businesses grow and data use expands, the SCE 1000 can adapt without compromising performance.

In summary, the Cisco Systems OL-7821-04, SCE 1000 2xGBE is a versatile network service appliance that combines high performance, advanced service creation technology, and strong security features. It stands out as an essential tool for service providers aiming to enhance their network capabilities and deliver superior services to customers. Its dual GbE ports, IPv4/IPv6 support, and dynamic traffic management make it a reliable choice for organizations anticipating significant data growth.
Top Page Image Contents