Cisco SCE 1000 Quick Start Manual page 23

Entry Formats
Each ACL may permit/deny access to any IP address, one or more ranges of IP addresses, or one or more individual IP address.
Three entry formats are available to support these options:
• Any IP address — Type the word "any". Any IP address will be permitted or denied access.
• Range of IP addresses — Type the beginning IP address in the desired range, then enter the wildcard bits that define the
range.
This wildcard functions like a reverse mask, in that all "1" bits in the wildcard indicate the corresponding bit in the IP
address should be ignored. All other bits must match the corresponding bit in the specified IP address. Refer to the table
below for examples.
Each range of IP addresses can be configured to be permitted or denied access.
• Individual IP address— Type the desired IP address, then enter the wildcard bits 0.0.0.0.
Each individual IP address can be configured to be permitted or denied access.
Table 2 IP address/Wildcard Bits
Initial IP address
10.1.1.0
10.1.1.0
10.1.1.0
Order of Entries
The order of the entries in the list is important. The entries in the list are tested sequentially, and the action is determined by the
first entry that matches the connecting IP address. Therefore, when the entry "any" appears in an Access Control List, all
succeeding entries are irrelevant.
Consider two hypothetical ACLs containing the same entries in a different order.
The following list would permit access to all IP addresses, including 10.1.1.0:
permit any
deny 10.1.1.0
Note that the above list could not actually be created using the setup utility, since after the "any" entry, no other entries could
be added to the list.
The following list will deny access to IP address 10.1.1.0, but permit access to all others:
deny 10.1.1.0
permit any
If no entry in the assigned Access Control List matches the connection, or if the Access Control List is empty, the default action
is deny.
To create the access control lists, complete the following steps:
Summary Steps
1. Enter the Access Control Lists configuration menu.
2. You have the option of creating or modifying Access Control Lists, or skipping this section and proceeding directly to assign
the existing ACLs to the desired management interfaces.
3. Type the number of the Access Control List to be configured (1 through 99) and press Enter.
4. Begin adding entries to the selected list.
5. Type the IP address to be added to this list, and press Enter.
6. If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and press Enter. (See Entry
Formats, page 23.)
7. The maximum number of entries in an ACL is 20.
Wildcard bits
0.0.0.255
0.0.0.63
0.0.0.0
Range
10.1.1.0–10.1.1.255
10.1.1.0–10.1.1.63
10.1.1.0 (individual entry)
23