Cisco 7100 Series Spezifikationen PDF herunterladen (Seite 97)

Extranet VPN Business Scenario 4-25

Step 4—Configuring Cisco IOS Firewall Features

Verifying Extended Access Lists

To verify the conﬁguration:

• Enter the show access-lists 112 EXEC command to display the contents of the access

list.

hq-sanjose# show access-list 112

Extended IP access list 112

deny tcp any any

deny udp any any

permit ip host 10.2.2.2 host 10.1.5.3

Applying Access Lists to Interfaces

After you create an access list, you can apply it to one or more interfaces. Access lists can

be applied on either outbound or inbound interfaces.

To apply anaccess list inbound and outbound on an interface, complete the following steps

starting in global conﬁguration mode:

Step Command Purpose

hq-sanjose(config)# interface fastethernet 0/1

Specify Fast Ethernet interface 0/1 on the

headquarters router and enter interface

conﬁguration mode.

hq-sanjose(config-if)# ip access-group 112 in

Conﬁgure access list 112 inbound on Fast

Ethernet interface 0/1 on the headquarters

router.

hq-sanjose(config-if)# interface serial 2/0

Specify serial interface 2/0 on the

headquarters router and enter interface

conﬁguration mode.

hq-sanjose(config-if)# ip access-group 112 out

Conﬁgure access list 112 outbound on

serial interface 2/0 on the headquarters

router.

hq-sanjose(config-if)# exit

hq-sanjose(config)#

Exit back to global conﬁguration mode.

1 2 ... 92 93 94 95 96 97 98 99 100 101 102 ... 111 112

Keine Kommentare

Cisco 7100 Series Spezifikationen Seite 97