6-49
Cisco MWR 1941-DC Mobile Wireless Edge Router Software Configuration Guide
OL-11503-01
Chapter 6 Configuring the MWR 1941-DC in a Cell Site DCN
Filtering IP Packets Using Access Lists
To create an extended access list, use the following commands in global configuration mode:
Note
The
fragments
keyword is described in the
“Specifying IP Extended Access Lists with Fragment
Control” section on page 6-53
.
After you create an access list, you place any subsequent additions (possibly entered from the terminal)
at the end of the list. In other words, you cannot selectively add or remove access list command lines
from a specific access list.
Command
Purpose
Step 1
Router(config)#
access-list
access-list-number
remark
remark
Indicates the purpose of the
deny
or
permit
statement.
1
1.
This example configures the remark before the
deny
or
permit
statement. The remark can be configured after the
deny
or
permit
statement.
Step 2
Router(config)#
access-list
access-list-number
{
deny
|
permit
}
protocol source source-wildcard
destination destination-wildcard
[
precedence
precedence
] [
tos
tos
] [
established
] [
log
|
log-input
] [
time-range
time-range-name
] [
fragments
]
or
Router(config)#
access-list
access-list-number
{
deny
|
permit
}
protocol
any any
[
log
|
log-input
]
[
time-range
time-range-name
] [
fragments
]
or
Router(config)#
access-list
access-list-number
{
deny
|
permit
}
protocol
host
source
host
destination
[
log
|
log-input
]
[
time-range
time-range-name
][
fragments
]
or
Router(config)#
access-list
access-list-number
[
dynamic
dynamic-name
[
timeout
minutes
]] {
deny
|
permit
}
protocol source source-wildcard destination
destination-wildcard
[
precedence
precedence
] [
tos
tos
] [
established
] [
log
|
log-input
] [
time-range
time-range-name
] [
fragments
]
Defines an extended IP access list number and the
access conditions. Specifies a time range to restrict
when the
permit
or
deny
statement is in effect. Use
the
log
keyword to get access list logging messages,
including violations. Use the
log-input
keyword to
include input interface, source MAC address, or VC
in the logging output.
or
Defines an extended IP access list using an
abbreviation for a source and source wildcard of
0.0.0.0 255.255.255.255, and an abbreviation for a
destination and destination wildcard of 0.0.0.0
255.255.255.255.
or
Defines an extended IP access list using an
abbreviation for a source and source wildcard of
source
0.0.0.0, and an abbreviation for a destination
and destination wildcard of
destination
0.0.0.0.
or
Defines a dynamic access list. For information about
lock-and-key access, refer to the “Configuring Traffic
Filters” chapter in the
Cisco IOS Security
Configuration Guide
.
Summary of Contents for MWR 1941-DC - 1941 Mobile Wireless Router
Page 49: ...P A R T 1 Implementing the MWR 1941 DC Router in an IP RAN ...
Page 50: ......
Page 107: ...P A R T 2 Implementing the MWR 1941 DC Router in a Cell Site DCN ...
Page 108: ......
