Enterasys Networks X-Pedition XSR CLI - Manual (Page 630)

General Security Commands
16-86 Configuring Security
Mode
Global configuration: XSR(config)#
Default
No access list defined (that is, all access permitted)
Examples
The following example denies access only for ICMP packets coming from hosts on the three
specified networks. The wildcard bits apply to the host portions of the network addresses. Any
host with a source address that does not match the access list statements will be permitted.
XSR(config)#access-list 100 deny ICMP 192.5.34.0 0.0.0.255
XSR(config)#access-list 100 deny ICMP 128.88.0.0 0.0.255.255
XSR(config)#access-list 100 deny ICMP 36.0.0.0 0.255.255.255
The following example replaces entry 87 with the following entry:
XSR(config)#access-list 123 replace 87 deny ip host 1.2.1.2
The following example removes entries 16, 17 and 18 from ACL 177:
XSR(config)#no access-list 177 16 18
The following example removes the entire ACL 102:
XSR(config)#no access-list 102
The following example moves entries 16 ‐ 18 within an ACL to the beginning of the list:
XSR(config)#access-list 101 move 1 16 18
The example below moves entries 16 ‐ 18 from ACL 144 to its beginning:
XSR(config)#access-list 144 move 1 16 18
The following example moves entry 2 to the end of ACL 133:
XSR(config)#access-list 133 move 999 2
access-list (standard)
This command defines a standard IP Access List (ACL) by numbers, ranging from 1 to 99. ACL
restrictions are applied using the
ip access-group command.
New and existing ACL entries can be added/replaced in a particular ACL without you having to
rewrite the entire ACL by using the insert/replace number parameters. If neither the insert nor the
replace option is specified, then the new entry is appended to the list. This is noteworthy since ACL
criteria are evaluated in the order displayed by the
show access-list command.
list# The standard access list number, ranging from 1 to 99.
ent1 Optional single entry number, or the first entry number in the range to be
removed. If unspecified, the entire ACL is removed.
ent2 Optional last entry number in the range to be removed.