Filter
Top Products
DES-7200 Configuration Guide Chapter 1 Access Control List
Configuration
1-35
10 deny tcp 192.168.1.0 0.0.0.255 eq 8000 any time-range worktime (active)
20 deny tcp 192.168.1.0 0.0.0.255 eq 8001 any time-range worktime (active)
30 deny tcp 192.168.1.0 0.0.0.255 eq 443 any time-range worktime (active)
40 deny tcp 192.168.1.0 0.0.0.255 eq 1863 any time-range worktime (active)
50 deny tcp 192.168.1.0 0.0.0.255 eq 4000 any time-range worktime (active)
60 deny udp 192.168.1.0 0.0.0.255 eq 8000 any time-range worktime (active)
70 deny udp 192.168.1.0 0.0.0.255 eq 1429 any time-range worktime (active)
80 deny udp 192.168.1.0 0.0.0.255 eq 6000 any time-range worktime (active)
90 deny udp 192.168.1.0 0.0.0.255 eq 6001 any time-range worktime (active)
100 deny udp 192.168.1.0 0.0.0.255 eq 6002 any time-range worktime (active)
110 deny udp 192.168.1.0 0.0.0.255 eq 6003 any time-range worktime (active)
120 deny udp 192.168.1.0 0.0.0.255 eq 6004 any time-range worktime (active)
Step 2: Verify whether ACL configurations are complete. The key is that whether the
correct ACL has been applied to the specified interface.
SwitchA:
SwitchA#show run
interface GigabitEthernet 2/1
no switchport
no ip proxy-arp
ip access-group Virus_Defence in
ip address 192.168.5.1 255.255.255.0
!
interface GigabitEthernet 2/2
switchport mode trunk
ip access-group access_server in
!
interface VLAN 2
no ip proxy-arp
ip access-group access_server in
ip address 192.168.4.2 255.255.255.0
SwitchB:
SwitchB#show run
!
interface GigabitEthernet 0/22
switchport mode trunk
ip access-group vlan_access1 in
!
interface GigabitEthernet 0/23
switchport mode trunk
ip access-group vlan_access2 in
!
interface VLAN 2
no ip proxy-arp
ip access-group yanfa in
ip address 192.168.1.100 255.255.255.0