Examples - Cisco SCE 1000 Installation And Configuration Manual

Step 7: Configuring Access Control Lists (ACLs)
The maximum number of entries in an ACL is 20.
Step 7
If the "any" option was used, no other IP addresses may be added to the list.
•
•
•
When all entries are added to one list, you are asked whether you would like to create another ACL. You
Step 8
may define up to 99 ACLs.
•
•
•
•
Restrict IP access to the SCE 1000 by assigning the appropriate ACL.
Step 9
Type the number of the ACL to be assigned to IP access and press Enter.
To accept the default ACL, press Enter.
Enter IP access-class [0]:
Step 10 Restrict Telnet access to the SCE 1000 by assigning the appropriate ACL.
Type the number of the ACL to be assigned to the Telnet interface and press Enter.
To accept the default ACL, press Enter.
Enter Telnet access-class [0]: 2

Examples

Example 1:
This example illustrates a common access control scenario. Let us assume the following:
•
•
We therefore need to create two access control lists:
•
•
ACL #1 = permit any IP address. Assign to IP access.
Cisco SCE 1000 2xGBE Installation and Configuration Guide
5-16
Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration
To add more entries, type y and press Enter
Would you like to add another entry to this list? [no]:y
Enter up to 20 entries as described in step 5 and step 6.
When all entries have been added, press Enter
Would you like to add another entry to this list? [no]:
To create another ACL, type y and press Enter
Would you like to configure another list? [no]: y
Enter up to 20 IP addresses in this new ACL, as described in step 5 and step 6.
When all ACLs have been created, press Enter.
Would you like to configure another list? [no]:
You are now prompted to assign the desired ACLs to restrict IP and Telnet access.
We want to permit every station to access the SCE platform on the management port (for example
ping, SNMP polling, and so forth).
We want to restrict Telnet access to only a few permitted stations.
For general IP access — permit access to all IP addresses.
For Telnet — permit access to the specified IP address, and deny to all others.
OL-26790-01