Cisco 4700M Configuration Manual page 29

Chapter 1 Configuring Security Access Control Lists
Table 1-1
Task and Command Example
1.
2.
3.
4.
5.
6.
7.
8.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
ACL Configuration Quick Start
If you are operating in multiple contexts, observe the CLI prompt to verify
that you are operating in the desired context. If necessary, change to the
correct context.
host1/Admin# changeto C1
host1/C1#
The rest of the examples in this table use the Admin context, unless
otherwise specified. For details on creating contexts, see the Cisco 4700
Series Application Control Engine Appliance Virtualization Configuration
Guide.
Enter configuration mode.
host1/Admin# config
host1/Admin(config)#
Create an ACL.
host1/Admin(config)# access-list INBOUND extended deny ip
192.168.12.0 255.255.255.0 any
As required by your application, add entries to the ACL using the same
access list name. For example, enter:
host1/Admin(config)# access-list INBOUND extended permit ip any
any
Apply the ACL to an individual interface.
host1/Admin(config)# interface vlan 10
host1/Admin(config-if)# access-group input INBOUND
Alternatively, you can apply an ACL globally to all interfaces in a context.
host1/Admin(config)# access-group input INBOUND
(Optional) Save your configuration changes to flash memory.
host1/Admin(config)# exit
host1/Admin# copy running-config startup-config
Display and verify the ACL configuration information.
host1/Admin# show running-config access-list
ACL Configuration Quick Start
1-5