|
|
|
The CNA system’s CLI implementation allows you to create access lists and apply them selectively to regulate the type of traffic that is allowed or denied over an interface. This IP network security feature allows you to control network access at both the IP protocol level, and the TCP and UDP port levels.
First, create the access list while in configuration (config) mode, using the ip access-list command. This will place the device into access-list configuration (config-acl) mode, which allows you to define the parameters of the list.
Use the remark command to enter a line of descriptive text that will help you and others identify the intent of this list when you examine the configuration at some later date.
Use the permit and deny commands any number of times to define the rules governing access to the interfaces to which the access list is applied. Each instance of a command defines a different rule, to be applied to a single port.
You can define multiple access lists in the CNA configuration, but only one list in each direction (inbound and outbound) can be associated with an interface at any one time.
|
|
|