Update 'IT/Configuring a Cisco IOS Switch.md'

This commit is contained in:
arc 2023-11-28 22:17:06 +00:00
parent c6a583bd79
commit 85975a50ae

View File

@ -97,6 +97,20 @@ vlan [vlan-id]
no shutdown
```
# Access list management
Access lists are created implicitly when you apply the first configuration. More docs for access list management can be found at <https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3s/sec-data-acl-xe-3s-book/sec-create-ip-apply.html.xml>.
### Permitting a particular network for a numbered access list
From the privileged exec terminal:
```
access-list [access-list-num] permit [network] [wildcard-mask]
```
`permit` can be substituted with `deny` to instead explictly deny a network. An example of a valid network could be `192.168.1.0`, and a wildcard mask for a `/24` would be `0.0.0.255`. Unless explictly stated, an access list will deny all other traffic. You can explicitly allow traffic by default for a numbered access list with `access-list [access-list-num] permit any`.
### Denying traffic from a particular address for a numbered access list
```
access-list [access-list-num] deny [address]
```
# Viewing configs
### Vlan config
From the privileged exec terminal: