Cisco 4700M Configuration Manual page 60

Chapter 1 Configuring Security Access Control Lists
ACL Configuration Examples
You may choose to use an outbound ACL to simplify your ACL configuration. For
example, if you want to allow three inside networks on three different interfaces
to access each other, you can create a simple inbound ACL on each interface that
allows all traffic on each inside interface (see Figure 1-1).
Figure 1-1 Inbound ACLs
Web Server:
209.165.200.225
ACE Outside
Inside
Eng
HR
ACL Inbound ACL Inbound ACL Inbound
Permit from any to any Permit from any to any Permit from any to any
10.1.1.0/24
10.1.3.0/24
10.1.2.0/24
The following commands create three inbound ACLs that allow all traffic on each
inside interface:
host1/Admin(config)# access-list INSIDE extended permit ip any any
host1/Admin(config)# interface vlan 100
host1/Admin(config-if)# access-group input INSIDE
host1/Admin(config)# access-list HR extended permit ip any any
host1/Admin(config)# interface vlan 100
host1/Admin(config-if)# access-group input HR
host1/Admin(config)# access-list ENG extended permit ip any any
host1/Admin(config)# interface vlan 100
host1/Admin(config-if)# access-group input ENG
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
1-36
OL-16202-01