User's Manual

Table Of Contents
424
Users Manual of CS-6306R
43.4.3 Configuring IP Access List Based on Physical Port
43.4.3.1 Filtering IP Message
43.4.3.2 Filtering IP Message
Filtering message helps control the movement of packet in the network. The control can limit network
transmission and network usage through a certain user or device. To make packets valid or invalid through
the crossly designated interface, our routing switch provides the access list. The access list can be used in
the following modes:
Controlling packet transmission on the interface
Controlling virtual terminal line access
Limiting route update content
The section describes how to create IP access lists and how to use them.
The IP access list is an orderly set of the permit/forbid conditions for applying IP addresses. The ROS
software of our switch tests the address one by one in the access list according to regulations. The first match
determines whether the ROS accepts or declines the address. After the first match, the ROS software
terminates the match regulations. The order of the conditions is, therefore, important. If no regulations match,
the address is declined.
Use the access list by following the following steps:
(1) Create the access list by designating the access list name and conditions.
(2) Apply the access list to the interface.
43.4.3.3 Creating Standard and Extensible IP Access List
Use a character string to create an IP access list.
The standard access list and the extensible access list cannot have the same
name.
Run the following command in global configuration mode to create a standard access list:
Run To
ip access-list standardname
Use a name to define a standard access list.
deny {source [source-mask] |
any}[log] or permit {source
[source-mask] | any}[log]
Designate one or multiple permit/deny
conditions in standard access list
configuration mode. The previous setting
decides whether the packet is approved or
disapproved.
Exit Log out from the access list configuration
mode.