HP 7000 dl Router Series Guide de l'utilisateur télécharger pdf (Page 785)

100

101

Command Reference Guide Tunnel Configuration Command Set

ip access-group <listname> [in | out]

Use the ip access-group command to create an access list to be used for packets transmitted on or received

from the specified interface. Use the no form of this command to disable this type of control.

Syntax Description

<listname> Assigns an IP access list name.

in Enables access control on packets received on the specified interface.

out Enables access control on packets transmitted on the specified interface.

Default Values

By default, these commands are disabled.

Command Modes

(config-interface)# Interface Configuration Mode

Valid interfaces include: Ethernet (eth 0/1), PPP virtual interfaces (ppp 1), HDLC

virtual interfaces (hdlc 1), Frame Relay virtual sub-interfaces (fr 1.20), tunnel

interfaces (tunnel 1), and VLAN interface (vlan 1).

Functional Notes

When this command is enabled, the IP destination address of each packet must be validated before being

passed through. If the packet is not acceptable per these settings, it is dropped.

Usage Examples

The following example sets up the unit to only allow Telnet traffic (as defined in the user-configured

TelnetOnly IP access list) into the tunnel interface:

(config)#ip access-list extended TelnetOnly

(config-ext-nacl)#permit tcp any any eq telnet

(config-ext-nacl)#interface tunnel 1

(config-tunnel 1)#ip access-group TelnetOnly in

1 2 ... 780 781 782 783 784 785 786 787 788 789 790 ... 940 941

Commentaires sur ces manuels

Pas de commentaire

HP 7000 dl Router Series Guide de l'utilisateur Page 785

Commentaires sur ces manuels

Produits connexes et manuels pour Mise en réseau HP 7000 dl Router Series