Cisco 4700M Configuration Manual page 4

Contents
2
C H A P T E R
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
iv
Creating a Network Object Group
Adding a Description to a Network Object Group
Configuring a Network IP Address for a Network Object Group
Configuring a Host IP Address
Configuring Service Object Groups
Creating a Service Object Group
Adding a Description to a Service Object Group
Defining Protocol Parameters for a Service Object Group
Using Object Groups in an ACL
Example of Configuring an Extended ACL Without Object Groups
Example of Configuring the Equivalent Extended ACL Using Object
Groups
1-29
Example of How an Object Group Expands into Multiple ACL
Entries
1-30
Applying an ACL to an Interface
Applying an ACL Globally to All Interfaces in a Context
Filtering Traffic with an ACL
ACL Configuration Examples
Examples of Extended ACLs
Inbound and Outbound ACLs
IP Addresses for ACLs with NAT
Examples of EtherType ACLs
Displaying ACL Configuration Information and Statistics
Displaying ACL Configuration Information
Displaying ACL Statistics
Displaying the ACL Merge Tree Node Usage
Clearing ACL Statistics
Configuring Authentication and Accounting Services
AAA Overview
2-2
1-22
1-23
1-24
1-24
1-28
1-31
1-33
1-33
1-33
1-35
1-38
1-42
1-43
1-43
1-45
1-22
1-23
1-25
1-26
1-32
1-43
1-45
2-1
OL-16202-01
1-28