Ipv4 Acl Configuration Examples; Acls In A Small Networked Office - Cisco Catalyst 2960-XR Security Configuration Manual

IPv4 ACL Configuration Examples

Switch(config-ext-nacl)# deny tcp host 171.69.2.88 any eq telnet
IPv4 ACL Configuration Examples
This section provides examples of configuring and applying IPv4 ACLs. For detailed information about
compiling ACLs, see the Cisco IOS Security Configuration Guide, Release 12.4 and to the Configuring IP
Services" section in the "IP Addressing and Services" chapter of the Cisco IOS IP Configuration Guide, Release
12.4.

ACLs in a Small Networked Office

This shows a small networked office environment with routed Port 2 connected to Server A, containing benefits
and other information that all employees can access, and routed Port 1 connected to Server B, containing
confidential payroll data. All users can access Server A, but Server B has restricted access.
Figure 5: Using Router ACLs to Control Traffic
Use router ACLs to do this in one of two ways:
• Create a standard ACL, and filter traffic coming to the server from Port 1.
• Create an extended ACL, and filter traffic coming from the server into Port 1.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
142
Configuring IPv4 ACLs
OL-29434-01