Cisco 4700M Configuration Manual page 61

Chapter 1 Configuring Security Access Control Lists
ACL Configuration Examples
If you choose to allow only certain hosts on the inside networks to access a web
server on the outside network, you can create a more restrictive ACL that allows
only the specified hosts and apply it to the outbound direction of the outside
interface (see Figure 1-2). For information about NAT and IP addresses, see the
"IP Addresses for ACLs with NAT" section. The outbound ACL prevents any
other hosts from reaching the outside network.
The following commands create an ACL that allows only specified hosts and
apply it to the outbound direction of the outside interface:
host1/Admin(config)# access-list OUTSIDE extended permit tcp host
209.165.201.4 host 209.165.200.225 eq www
host1/Admin(config)# access-list OUTSIDE extended permit tcp host
209.165.201.6 host 209.165.200.225 eq www
host1/Admin(config)# access-list OUTSIDE extended permit tcp host
209.165.201.8 host 209.165.200.225 eq www
host1/Admin(config)# interface vlan 100
host1/Admin(config-if)# access-group output OUTSIDE
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
1-37
OL-16202-01