Cisco SCE 1000 Installation And Configuration Manual page 83

Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration
Order of Entries
The order of the entries in the list is important. The entries in the list are tested sequentially, and the
action is determined by the first entry that matches the connecting IP address. Therefore, when the entry
"any" appears in an Access Control List, all succeeding entries are irrelevant.
Consider two hypothetical ACLs containing the same entries in a different order.
The following list would permit access to all IP addresses, including 10.1.1.0:
permit any
deny 10.1.1.0
Note that the above list could not actually be created using the setup utility, since after the "any" entry,
no other entries could be added to the list.
The following list will deny access to IP address 10.1.1.0, but permit access to all others:
deny 10.1.1.0
permit any
If no entry in the assigned Access Control List matches the connection, or if the Access Control List is
empty, the default action is deny.
To create the access control lists, complete the following steps:
Step 1 Enter the Access Control Lists configuration menu.
Would you like to enter the Access lists configuration menu? [no]:y
Type y and press Enter.
The Access Control Lists configuration dialog begins.
You have the option of creating or modifying Access Control Lists, or skipping this section and
Step 2
proceeding directly to assign the existing ACLs to the desired management interfaces.
Would you like to create new Access lists or modify existing lists? [no]: y
If you choose not to create or edit Access Control Lists, skip to.
Type the number of the Access Control List to be configured (1 through 99) and press Enter.
Step 3
Note that there is no default for this parameter.
Begin adding entries to the selected list.
Step 4
Indicate whether this entry is permitted access or denied access.
•
•
Type the IP address to be added to this list, and press Enter.
Step 5
Note that there is no default for this parameter.
Enter IP address or the word 'any' to denote any IP address:
If you entered a specific IP address, enter the wildcard bits to define a range of IP addresses and press
Step 6
Enter. (See
To define an individual IP address, type 0.0.0.0 and press Enter.
There is no default for this parameter.
Enter wildcard bits:
OL-26790-01
To permit access press Enter.
To deny access type n and press Enter.
Entry Formats, page 5-14.)
Cisco SCE 1000 2xGBE Installation and Configuration Guide
Step 7: Configuring Access Control Lists (ACLs)
5-15