Acl Example - Planet Networking & Communication WGSW-50040 Configuration Manual

50-port 10/100/1000mbps with 4 shared sfp managed gigabit switch
Table of Contents

Advertisement

5. Clear the filtering information of the specified port
Admin Mode
clear access-group statistic interface
{ <interface-name> | ethernet <interface-name> }

24.3 ACL Example

Scenario 1:
The user has the following configuration requirement: port 1/10 of the switch connects to 10.0.0.0/24 segment,
ftp is not desired for the user.
Configuration description:
1. Create a proper ACL
2. Configuring packet filtering function
3. Bind the ACL to the port
The configuration steps are listed below:
Switch(config)#access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch(config)#firewall enable
Switch(config)#firewall default permit
Switch(config)#interface ethernet 1/10
Switch(Config-If-Ethernet1/10)#ip access-group 110 in
Switch(Config-If-Ethernet1/10)#exit
Switch(config)#exit
Configuration result:
Switch#show firewall
Firewall status: enable.
Firewall default rule: permit.
Switch#show access-lists
access-list 110(used 1 time(s))
access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
Switch#show access-group interface ethernet 1/10
interface name:Ethernet1/10
the ingress acl use in firewall is 110, traffic-statistics Disable.
Command
24-18
port
of
VLAN;
the
command
deletes
access-list bound to the port
of VLAN.
Explanation
Clear the filtering information
of the specified port.
no
the

Advertisement

Table of Contents
loading

Table of Contents