Update 'IT/Configuring a Cisco IOS Switch.md'
This commit is contained in:
parent
c6a583bd79
commit
85975a50ae
@ -97,6 +97,20 @@ vlan [vlan-id]
|
||||
no shutdown
|
||||
```
|
||||
|
||||
# Access list management
|
||||
Access lists are created implicitly when you apply the first configuration. More docs for access list management can be found at <https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3s/sec-data-acl-xe-3s-book/sec-create-ip-apply.html.xml>.
|
||||
### Permitting a particular network for a numbered access list
|
||||
From the privileged exec terminal:
|
||||
```
|
||||
access-list [access-list-num] permit [network] [wildcard-mask]
|
||||
```
|
||||
`permit` can be substituted with `deny` to instead explictly deny a network. An example of a valid network could be `192.168.1.0`, and a wildcard mask for a `/24` would be `0.0.0.255`. Unless explictly stated, an access list will deny all other traffic. You can explicitly allow traffic by default for a numbered access list with `access-list [access-list-num] permit any`.
|
||||
|
||||
### Denying traffic from a particular address for a numbered access list
|
||||
```
|
||||
access-list [access-list-num] deny [address]
|
||||
```
|
||||
|
||||
# Viewing configs
|
||||
### Vlan config
|
||||
From the privileged exec terminal:
|
||||
|
Loading…
Reference in New Issue
Block a user