
Configuring IP Utilities
C-2
308631-14.00 Rev 00
Creating and Naming the Policy
To create an IP global access policy, navigate to the IP global prompt (for
example,
box; ip
) and enter:
access-policy polname
<policy_name>
policy_name
is a unique name for this policy.
For example, the following command sequence creates a policy named policy_1
and displays the current (default) values for the policy:
ip#
access-policy polname policy_1
access-policy/policy_1#
info
action deny
log on
service telnet
precedence 0
polname policy_1
state enabled
Specifying the IP Service
By default, the global IP access policy controls access for Telnet.
To specify the IP utility for which you want this policy to control access, navigate
to the policy-specific prompt (for example,
box; ip; access-policy/policy_1
) and
enter:
service
<service>
service is:
telnet
(default)
ftp
tftp
snmp
ntp
http
For example, the following command specifies FTP as the IP utility controlled by
policy_1:
access-policy/policy_1#
service ftp
access-policy/policy_1#
Komentáře k této Příručce