User Guide
Page 26
...of conditions in which hosts can allow one . The first match determines whether the switch accepts or rejects the packet. Because the switch stops testing conditions after the first match, the order of a network, but prevent Host B from accessing the same network. In Figure 13, ACLs ...The meaning of permit or deny depends on a given interface and a direction. and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Understanding ACLs Packet filtering can be allowed onto all parts of permit and deny conditions that the packet has ...
...of conditions in which hosts can allow one . The first match determines whether the switch accepts or rejects the packet. Because the switch stops testing conditions after the first match, the order of a network, but prevent Host B from accessing the same network. In Figure 13, ACLs ...The meaning of permit or deny depends on a given interface and a direction. and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Understanding ACLs Packet filtering can be allowed onto all parts of permit and deny conditions that the packet has ...
User Guide
Page 27
The remaining fragments also match the Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ 27 Some ACEs do test Layer 4 information cannot be applied in the standard manner to most of the fragments in a fragmented IP packet. Consider access list 102, ...Layer 3 information in the examples, the eq keyword after the destination address means to test for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Figure 13 Using ACLs to Control Traffic to a Network Feature Overview Host A Cisco router with these commands, applied to host 10.1.1.1 on the SMTP port. When this...
The remaining fragments also match the Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ 27 Some ACEs do test Layer 4 information cannot be applied in the standard manner to most of the fragments in a fragmented IP packet. Consider access list 102, ...Layer 3 information in the examples, the eq keyword after the destination address means to test for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Figure 13 Using ACLs to Control Traffic to a Network Feature Overview Host A Cisco router with these commands, applied to host 10.1.1.1 on the SMTP port. When this...
User Guide
Page 78
...specifying an access list number or name and access conditions. The process is critical. The switch tests packets against the conditions in the Cisco IP Configuration Guide for Cisco IOS Release 12.2. Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ 78 and 36-Port Ethernet Switch ... ACL can then be created by one. Creating Standard and Extended IP ACLs This section describes how to Cisco IOS IP Command Reference for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Configuring Network Security with a header length of less than five are not be access-controlled. ...
...specifying an access list number or name and access conditions. The process is critical. The switch tests packets against the conditions in the Cisco IP Configuration Guide for Cisco IOS Release 12.2. Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ 78 and 36-Port Ethernet Switch ... ACL can then be created by one. Creating Standard and Extended IP ACLs This section describes how to Cisco IOS IP Command Reference for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Configuring Network Security with a header length of less than five are not be access-controlled. ...
User Guide
Page 140
...port 25 on one end of the connection and a random port number on network 36.0.0.0 subnets and denies all packets coming in ... 140 Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ It permits any others (the eq keyword after the destination address means to deny Telnet... 10.1.1.3 any The following example shows how to create and display an extended access list to test for the 16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Configuration Examples for the TCP destination port number equaling Telnet): Switch(config)# access-list...
...port 25 on one end of the connection and a random port number on network 36.0.0.0 subnets and denies all packets coming in ... 140 Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ It permits any others (the eq keyword after the destination address means to deny Telnet... 10.1.1.3 any The following example shows how to create and display an extended access list to test for the 16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Configuration Examples for the TCP destination port number equaling Telnet): Switch(config)# access-list...
User Guide
Page 214
...not appear, but the lines that contain output do not specify a class-map-name, all test (id 2) Match access-group name testingacl The following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. This command was introduced. show class-map command in privileged EXEC mode.... that contain Output appear. and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series show class-map To display quality of the specified class map. show class-map test Class Map match-all class maps appear. Match access-group name testingacl...
...not appear, but the lines that contain output do not specify a class-map-name, all test (id 2) Match access-group name testingacl The following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. This command was introduced. show class-map command in privileged EXEC mode.... that contain Output appear. and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series show class-map To display quality of the specified class map. show class-map test Class Map match-all class maps appear. Match access-group name testingacl...
User Guide
Page 230
show policy-map 16- Policy Map wizard_policy3 class wizard_1-1-1-2 Policy Map test Policy Map policytest class classtest police 10000000 8192 exceed-action drop 230 Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ Policy maps can include policers that specify the bandwidth... limitations and the action to display all policy maps configured on the switch. Examples The following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. Command Modes Privileged EXEC Command History Release 12.1(6)EA2 12.2(15)ZJ Modification This command was...
show policy-map 16- Policy Map wizard_policy3 class wizard_1-1-1-2 Policy Map test Policy Map policytest class classtest police 10000000 8192 exceed-action drop 230 Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ Policy maps can include policers that specify the bandwidth... limitations and the action to display all policy maps configured on the switch. Examples The following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers. Command Modes Privileged EXEC Command History Release 12.1(6)EA2 12.2(15)ZJ Modification This command was...