Cisco ASR 1000 Series Configuration Manual page 78

Using Access Lists for a WCCP Service Group
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Device> enable
Step 2 configure terminal
Example:
Device# configure terminal
Step 3
access-list access-list-number remark remark
Example:
Device(config)# access-list 1 remark Give
access to user1
Step 4 access-list access-list-number permit {source
[source-wildcard] | any} [log]
Example:
Device(config)# access-list 1 permit
172.16.5.22 0.0.0.0
Step 5
access-list access-list-number remark remark
Example:
Device(config)# access-list 1 remark Give
access to user1
Step 6 access-list access-list-number deny {source
[source-wildcard] | any} | [log]
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000)
70
Purpose
Enables privileged EXEC mode.
• Enter your password if prompted.
Enters global configuration mode.
(Optional) Adds a user-friendly comment about an access list entry.
• A remark of up to 100 characters can precede or follow an access
list entry.
Creates an access list that enables or disables traffic redirection to
the cache engine and permits the specified source based on a source
address and wildcard mask.
• Every access list needs at least one permit statement; it does not
need to be the first entry.
• Standard IP access lists are numbered 1 to 99 or 1300 to 1999.
• If the source-wildcard is omitted, a wildcard mask of 0.0.0.0 is
assumed, meaning match on all bits of the source address.
• Optionally use the keyword any as a substitute for the source
source-wildcard to specify the source and source wildcard of
0.0.0.0 255.255.255.255.
• In this example, host 172.16.5.22 is allowed to pass the access
list.
(Optional) Adds a user-friendly comment about an access list entry.
• A remark of up to 100 characters can precede or follow an access
list entry.
Denies the specified source based on a source address and wildcard
mask.
Configuring WCCP