Cisco SCE 2000 Quick Start Manual page 34

Perform the Initial System Configuration
Order of Entries
The order of the entries in the list is important. The entries in the list are tested sequentially, and the
action is determined by the first entry that matches the connecting IP address. Therefore, when the entry
"any" appears in an Access Control List, all succeeding entries are irrelevant.
Consider two hypothetical ACLs containing the same entries in a different order.
The following list would permit access to all IP addresses, including 10.1.1.0:
permit any
deny 10.1.1.0
Note that the above list could not actually be created using the setup utility, since after the "any" entry,
no other entries could be added to the list.
The following list will deny access to IP address 10.1.1.0, but permit access to all others:
deny 10.1.1.0
permit any
If no entry in the assigned Access Control List matches the connection, or if the Access Control List is
empty, the default action is deny.
To create the access control lists, complete the following steps:
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
DETAILED STEPS
Enter the Access Control Lists configuration menu.
Step 1
Would you like to enter the Access lists configuration menu? [no]:y
Type
The Access Control Lists configuration dialog begins.
You have the option of creating or modifying Access Control Lists, or skipping this section and
Step 2
proceeding directly to assign the existing ACLs to the desired management interfaces.
Would you like to create new Access lists or modify existing lists? [no]: y
If you choose not to create or edit Access Control Lists, skip to .
Cisco SCE 2000 4xGBE Quick Start Guide
4-14
Enter the Access Control Lists configuration menu.
You have the option of creating or modifying Access Control Lists, or skipping this section and
proceeding directly to assign the existing ACLs to the desired management interfaces.
Type the number of the Access Control List to be configured (1 through 99) and press Enter.
Begin adding entries to the selected list.
Type the IP address to be added to this list, and press Enter.
If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and
press Enter. (See Entry Formats.)
The maximum number of entries in an ACL is 20.
When all entries are added to one list, you are asked whether you would like to create another ACL.
You may define up to 99 ACLs.
Restrict IP access to the SCE 2000 by assigning the appropriate ACL.
Restrict Telnet access to the SCE 2000 by assigning the appropriate ACL.
and press Enter.
y
Chapter 4 Connect the Management Interfaces and Perform Initial System Configuration
OL-7820-06