Table of Contents
Advertisement
Security Configuration Command Set
Configuring Access Lists
Examples
This example shows how to define access list 101 to deny ICMP transmissions from any source and
for any destination:
Matrix>Router(config)#access-list 101 deny ICMP any any
This example shows how to define access list 102 to deny TCP packets transmitted from IP source
10.1.2.1 with a port number of 42 to any destination:
Matrix>Router(config)#access-list 102 deny TCP host 10.1.2.1 eq 42 any
14.3.7.4 ip access-group
Use this command to apply access restrictions on an interface when operating in router mode.
ip access-group access-list-number {in | out}
ROUTER: This command can be executed when the device is in router mode only.
For details on how to enable router configuration modes, refer to
Syntax Description
access-list-number
in
out
Command Syntax of the "no" Form
The "no" form of this command removes the specified access list:
no ip access-group access-list-number {in | out}
Command Type
Router command.
Command Mode
Interface configuration: Matrix>Router(config-if(Vlan <vlan_id>))#
14-96
Matrix E1 Series (1G58x-09 and 1H582-xx) Configuration Guide
Specifies the number of the access list to be applied to the
access list. This is a decimal number from 1 to 199.
Filters inbound packets.
Filters outbound packets.
Section
3.3.3.
Advertisement
Table of Contents
