DELL N3000 User Manual

Configuring Access Control Lists

! Permit Telnet traffic from 192.168.0.X network to host 10.1.1.23

permit tcp 192.168.0.0 0.0.0.255 host 10.1.1.23 eq telnet

! Permit UDP traffic from 192.168.0.X network to host 10.1.1.23

permit udp 192.168.0.0 0.0.0.255 host 10.1.1.23

ACLs may also contain a number of shorthand qualifiers for protocols and IP, 

TCP, and UDP port numbers, as shown below. Note that not all of these 

qualifiers make sense in the context of any given port number; e.g., ftp and 

ftp-data only make sense in the context of the IP or UDP protocols, while an 

HTTP port number only makes sense in terms of the TCP or IP protocols. 

Refer to RFC 1700 or iana.org/protocols for a list of protocol numbers.

ip access-list Host10-1-1-23

! Permit Telnet traffic from 192.168.0.X network to host 10.1.1.23

permit tcp 192.168.0.0 0.0.0.255 host 10.1.1.23 eq telnet

! Permit UDP traffic from 192.168.0.X network to host 10.1.1.23

permit udp 192.168.0.0 0.0.0.255 host 10.1.1.23

ip access-list Host10-1-1-23

! Permit Telnet traffic from 192.168.0.X network to host 10.1.1.23

permit tcp 192.168.0.0 0.0.0.255 host 10.1.1.23 eq telnet

! Permit UDP traffic from 192.168.0.X network to host 10.1.1.23

permit udp 192.168.0.0 0.0.0.255 host 10.1.1.23

ip access-list Host10-1-1-23

! Permit Telnet traffic from 192.168.0.X network to host 10.1.1.23

permit tcp 192.168.0.0 0.0.0.255 host 10.1.1.23 eq telnet

! Permit UDP traffic from 192.168.0.X network to host 10.1.1.23

permit udp 192.168.0.0 0.0.0.255 host 10.1.1.23

To bind an access-list to an interface, use the access-group command. The in 

parameter specifies that the ACL is applied to ingress packets. The out 

parameter specifies that the ACL is applied to egress packets not generated by 

the switch/router. If no in/out parameter is specified, the access list default is 

to apply the ACL to ingress packets. 

ip access-list Host10-1-1-23

! Permit Telnet traffic from 192.168.0.X network to host 10.1.1.23

permit tcp 192.168.0.0 0.0.0.255 host 10.1.1.23 eq telnet

! Permit UDP traffic from 192.168.0.X network to host 10.1.1.23

permit udp 192.168.0.0 0.0.0.255 host 10.1.1.23