
130
7.2.11 ACL Configuration
Most network security sustems operate by allowing selective use of
services. An ACL (Acess Control List) is the usual means by which
access to, and denial of, services are controlled. It is simply a list of the
services available, each with a list of the hosts permitted to use the
service.
7.2.11.1 Scenario
7.2.11.2 Process of handling incoming packets
7.2.11.3 Configuration
Step 1: create ACL global
$create acl global macentry macaddr 00:01:eb:00:23:23 deny enable track enable
entry created
mac address : 00:01:eb:00:23:23
deny : enable track : enable
number of times port changed : 0
$
Step 2: create ACL port
$create acl port macentry portid 1 macaddr 00:01:23:23:23:34
entry created
portid : 1
mac address : 00:01:23:23:23:34
Comentários a estes Manuais