Cisco Cisco IOS Software Release 12.4(15)T

Descargar
Página de 30
 
Consent Feature for Cisco IOS Routers
  Configuration Examples for Authentication Proxy Consent
7
Cisco IOS Release 12.4(15)T
Configuration Examples for Authentication Proxy Consent
This section contains the following configuration examples:
Ingress Interface ACL and Intercept ACL Configuration: Example
The following example shows how to define the ingress interface ACL (via the ip access-list extended 
102
 command) to which the consent page policy ACEs will be dynamically appended. This example also 
shows how to define an intercept ACL (via the ip access-list extended 103 command) to intercept the 
ingress interesting traffic by the IP admission consent rule. 
ip access-list extended 102 
permit ip any 192.168.100.0 0.0.0.255 
permit ip any host 192.168.104.136 
permit udp any any eq bootps 
permit udp any any eq domain 
permit tcp any any eq www 
permit tcp any any eq 443 
permit udp any any eq 443 
exit 
ip access-list extended 103 
permit ip any host 192.168.104.136 
permit udp any host 192.168.104.132 eq domain 
permit tcp any host 192.168.104.136 eq www 
permit udp any host 192.168.104.136 eq 443 
permit tcp any host 192.168.104.136 eq 443 
exit 
Step 9
exit
Example:
Router(config-profile )# exit
Router(config)# exit
Returns to global configuration and privileged EXEC 
modes. 
Step 10
show parameter-map type consent
 
[parameter-map-name]
Example:
Router# show parameter-map type consent
(Optional) Displays all or a specified configured consent 
profiles.
Command or Action
Purpose