6-52
Cisco MWR 1941-DC Mobile Wireless Edge Router Software Configuration Guide
OL-11503-01
Chapter 6 Configuring the MWR 1941-DC in a Cell Site DCN
Filtering IP Packets Using Access Lists
Note
Autonomous switching is not used when you have extended access lists.
Note
The
fragments
keyword is described in the
“Specifying IP Extended Access Lists with Fragment
Control” section on page 6-53
.
After you initially create an access list, you place any subsequent additions (possibly entered from the
terminal) at the end of the list. In other words, you cannot selectively add access list command lines to
a specific access list. However, you can use
no permit
and
no deny
commands to remove entries from
a named access list.
Step 2
Router(config-ext-nacl)#
remark
remark
Allows you to comment about the following
deny
or
permit s
tatement in a named access list.
1
Step 3
Router(config-ext-nacl)#
deny
|
permit
protocol
source source-wildcard destination
destination-wildcard
[
precedence
precedence
] [
tos
tos
] [
established
] [
log
|
log-input
]
[
time-range
time-range-name
] [
fragments
]
and
Router(config-ext-nacl)#
deny
|
permit
protocol
any
any
[
log
|
log-input
]
[
time-range
time-range-name
]
[
fragments
]
or
Router(config-ext-nacl)#
deny
|
permit
protocol
host
source
host
destination
[
log
|
log-input
]
[
time-range
time-range-name
] [
fragments
]
or
Router(config-ext-nacl)#
dynamic
dynamic-name
[
timeout
minutes
] {
deny
|
permit
}
protocol source
source-wildcard destination destination-wildcard
[
precedence
precedence
] [
tos
tos
] [
established
] [
log
|
log-input
] [
time-range
time-range-name
]
[
fragments
]
In access-list configuration mode, specifies the
conditions allowed or denied. Specifies a time range
to restrict when the
permit
or
deny
statement is in
effect. Use the
log
keyword to get access list logging
messages, including violations. Use the
log-input
keyword to include input interface, source MAC
address, or VC in the logging output.
or
Defines an extended IP access list using an
abbreviation for a source and source wildcard of
0.0.0.0 255.255.255.255, and an abbreviation for a
destination and destination wildcard of 0.0.0.0
255.255.255.255.
or
Defines an extended IP access list using an
abbreviation for a source and source wildcard of
source
0.0.0.0, and an abbreviation for a destination
and destination wildcard of
destination
0.0.0.0.
or
Defines a dynamic access list.
1.
This example configures the remark before the
deny
or
permit
statement. The remark can be configured after the
deny
or
permit
statement.
Command
Purpose
Summary of Contents for MWR 1941-DC - 1941 Mobile Wireless Router
Page 49: ...P A R T 1 Implementing the MWR 1941 DC Router in an IP RAN ...
Page 50: ......
Page 107: ...P A R T 2 Implementing the MWR 1941 DC Router in a Cell Site DCN ...
Page 108: ......
