Filter
Top Products
DES-7200 Configuration Guide Chapter 1 Access Control List
Configuration
1-10
DES-7200(config)# interface GigabitEthernet 0/2
DES-7200(config-if)# ip address 2.2.2.2 255.255.255.0
DES-7200(config-if)# ip access-group 101 in
DES-7200(config-if)# ip access-group 101 out
According to requirements, configure an extended access list numbered 101
access-list 101 permit tcp 192.168.12.0 0.0.0.255 any eq telnet time-range check
DES-7200(config)# access-list 101 deny icmp 192.168.12.0 0.0.0.255 any
DES-7200(config)# access-list 101 deny ip 2.2.2.0 0.0.0.255 any
DES-7200(config)# access-list 101 deny ip any any
Configure the time range
DES-7200(config)# time-range check
DES-7200(config-time-range)# periodic weekdays 8:30 to 17:30
Note
For access list 101. the lat rule sentence ”access-list 101 deny ip any
any” is not needed, for the ending part of the access list implicates a
“deny any” rule sentence.
For DES-7200, the extended IP ACL does not support the neq
matching of TCP/UDP at L4 port.
Switch A configuration:
DES-7200(config)# hostname DES-7200
DES-7200(config)# interface GigabitEthernet 0/1
DES-7200(config-if)# ip address 192.168.202.1 255.255.255.0
DES-7200(config)# interface GigabitEthernet 0/2
DES-7200(config-if)# ip address 2.2.2.1 255.255.255.0
1.3 Configuring Extended
MAC Address-based
Access Control List
To configure MAC address-based access control lists on a device, you must specify
unique names or numbers for the access lists of a protocol to uniquely identifying each
access list inside the protocol. The following table lists the range of the numbers that
can be used to specify MAC access lists.
Protocol Number Range
Extended MAC Access List 700-799