Cisco Catalyst 3560-X Software Configuration Manual page 964
Hide thumbs
Also See for Catalyst 3560-X:
- Command reference manual (1188 pages) ,
- Software configuration manual (1438 pages) ,
- Manual (276 pages)
Table of Contents
Advertisement
Configuring Standard QoS
Command
Step 4
show access-lists
Step 5
copy running-config
startup-config
To delete an access list, use the no access-list access-list-number global configuration command.
This example shows how to allow access for only those hosts on the three specified networks. The
wildcard bits apply to the host portions of the network addresses. Any host with a source address that
does not match the access list statements is rejected.
Switch(config)# access-list 1 permit 192.5.255.0 0.0.0.255
Switch(config)# access-list 1 permit 128.88.0.0 0.0.255.255
Switch(config)# access-list 1 permit 36.0.0.0 0.0.0.255
! (Note: all other access implicitly denied)
Creating an IP Extended ACL
Beginning in privileged EXEC mode, follow these steps to create an IP extended ACL for IPv4 traffic:
Command
Step 1
configure terminal
Step 2
access-list access-list-number {deny |
permit} protocol source source-wildcard
destination destination-wildcard
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-50
Purpose
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Create an IP extended ACL, repeating the command as many times as
necessary.
•
For access-list-number, enter the access list number. The range is
100 to 199 and 2000 to 2699.
Use the permit keyword to permit a certain type of traffic if the
•
conditions are matched. Use the deny keyword to deny a certain
type of traffic if conditions are matched.
For protocol, enter the name or number of an IP protocol. Use the
•
question mark (?) to see a list of available protocol keywords.
For source, enter the network or host from which the packet is
•
being sent. You specify this by using dotted decimal notation, by
using the any keyword as an abbreviation for source 0.0.0.0
source-wildcard 255.255.255.255, or by using the host keyword
for source 0.0.0.0.
For source-wildcard, enter the wildcard bits by placing ones in the
•
bit positions that you want to ignore. You specify the wildcard by
using dotted decimal notation, by using the any keyword as an
abbreviation for source 0.0.0.0 source-wildcard 255.255.255.255,
or by using the host keyword for source 0.0.0.0.
For destination, enter the network or host to which the packet is
•
being sent. You have the same options for specifying the
destination and destination-wildcard as those described by source
and source-wildcard.
When creating an access list, remember that, by default, the end
Note
of the access list contains an implicit deny statement for
everything if it did not find a match before reaching the end.
Chapter 1
Configuring QoS
OL-25303-03
Advertisement
Table of Contents
Troubleshooting
