Enterasys Networks N Standalone (NSA) Series Switch User Manual


  Open as PDF
of 1372
 
Security Configuration Command Set
Configuring Access Lists
Matrix NSA Series Configuration Guide 14-161
14.3.12.2 access-list (standard)
Use this command to define a standard IP access list by number when operating in router mode.
Restrictions defined by an access list are applied by using the
ip access-group command
(Section 14.3.12.4).
access-list access-list-number [insert | replace entry] | [log 1-5000 | all] [move
destination source1 [source2]] {deny | permit} source [source-wildcard]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Syntax Description
NOTE: Valid access-list-numbers for standard ACLs are 1 to 99. For extended ACLs,
valid values are 100 to 199.
access-list-
number
Specifies a standard access list number. Valid values are
from 1 to 99.
insert | replace
entry
(Optional) Inserts this new entry before a specified entry in
an existing ACL, or replaces a specified entry with this new
entry.
log 1-5000 | all Enable syslog for ACL entry hits. Enable syslog for
sequential number of ACL entry or for all ACL entries
move destination
source1 source2
(Optional) Moves a sequence of access list entries before
another entry. Destination is the number of the existing
entry before which this new entry will be moved. Source1 is
a single entry number or the first entry number in the range
to be moved. Source2 (optional) is the last entry number in
the range to be moved. If not specified, only the source1
entry will be moved.
deny | permit Denies or permits access if specified conditions are met.