Step 7: Configuring Access Control Lists (Acls); Entry Formats - Cisco SCE 1000 Installation And Configuration Manual

Initial System Configuration
Enter RDR-formatter destination's IP address: 10.1.1.230
Enter RDR-formatter destination's TCP port number: 33000

Step 7: Configuring Access Control Lists (ACLs)

The SCE 1000 can be configured with Access Control Lists (ACLs), which are used to permit or
deny incoming connections on any of the management interfaces.
ACL #0 is a pre-defined list that permits access to all IP addresses.
Note
Configuration of access control lists is done in two stages:
Create the access control lists.
Step 1
You may create 99 ACLs with a maximum of 20 entries per list. Each entry consists of an IP
address, and an indication of whether access is permitted or denied to this IP address.
Step 2 Assign the ACLs to the appropriate management interface. (See
Topology-Dependent Parameters
The dialog permits you to skip the creation/editing of the ACLs and go directly to assigning ACLs
to the management interfaces.

Entry Formats

Each ACL may permit/deny access to any IP address, one or more ranges of IP addresses, or one
or more individual IP address. Three entry formats are available to support these options:
•
•
•
Table 5-2
Initial IP address
10.1.1.0
10.1.1.0
10.1.1.0
Cisco SCE 1000 2xGBE Installation and Configuration Guide
5-12
Chapter 5 Connecting the Management Interfaces and Performing Initial System Configuration
Any IP address — Type the word "any". Any IP address will be permitted or denied access.
Range of IP addresses — Type the beginning IP address in the desired range, then enter the
wildcard bits that define the range.
This wildcard functions like a reverse mask, in that all "1" bits in the wildcard indicate the
corresponding bit in the IP address should be ignored. All other bits must match the
corresponding bit in the specified IP address. Refer to the table below for examples.
Each range of IP addresses can be configured to be permitted or denied access.
Individual IP address — Type the desired IP address, then enter the wildcard bits 0.0.0.0.
Each individual IP address can be configured to be permitted or denied access.
IP address/Wildcard bit examples
(on page 5-18).)
Wildcard bits
0.0.0.255
0.0.0.63
0.0.0.0
Step 9: Configuring the
Range
10.1.1.0–10.1.1.255
10.1.1.0–10.1.1.63
10.1.1.0 (individual entry)
OL-7821-04