Comtrol ES9528-XT User Guide User Manual
Page 174
174 - Security (CLI)
RocketLinx ES9528 and ES9528-XT User Guide: 2000508 Rev. G
Configuration Using the Command Line Interface (CLI)
Port Security (Continued)
Example 1: Edit IP
Extended access list
Switch(config)# ip access-list extended 100
Switch(config-ext-acl)#permit
ip Any Internet Protocol
tcp Transmission Control Protocol
udp User Datagram Protocol
icmp Internet Control Message Protocol
Switch(config-ext-acl)#permit ip
A.B.C.D Source address
any Any source host
host A single source host
Switch(config-ext-acl)#permit ip 192.168.10.1
A.B.C.D Source wildcard bits
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
A.B.C.D Destination address
any Any destination host
host A single destination host
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
192.168.10.100 0.0.0.1
[IFNAME] Egress interface name
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
192.168.10.100 0.0.0.1 gi26
Note: Follow the below rules to configure ip extended access list.
IP Rule
: Permit/Deny Source_IP wildcard Dest_IP wildcard
Egress_Interface
TCP Rule
: Permit/Deny tcp Source_IP wildcard Dest_IP wildcard eq
Given_Port_Number Egress_Interface
UDP Rule
: Permit/Deny udp Source_IP wildcard Dest_IP wildcard eq
Given_Port_Number Egress_Interface
ICMP Rule
: Permit/Deny icmp Source_IP wildcard Dest_IP wildcard
ICMP_Message_Type ICMP_Message_Code Egress_Interface
Add MAC
Switch(config)# mac-address-table static 00C0.4e33.0101 vlan 1
interface fa1
mac-address-table unicast static set ok!
Port Security
Switch(config)# interface fa1
Switch(config-if)# switchport port-security
Disables new MAC addresses learning and aging activities!
Rule:
Add the static MAC, VLAN and Port binding first, then
enable the port security to stop new MAC learning.
Disable Port Security
Switch(config-if)# no switchport port-security
Enable new MAC addresses learning and aging activities!
Display
Switch# show mac-address-table static
Destination Address Address Type Vlan Destination Port
------------------- --------------- ------- ------------
00C0.4e33.0101 Static 1 fa1