
Configuring IP Global Access Policies
117358-A Rev. A C-5
For example, the following command specifies FTP as the IP utility controlled by
policy_1.
access-policy/policy_1# service ftp
access-policy/policy_1#
Specifying the Precedence
The precedence parameter specifies the precedence of this policy relative to other
global IP access policies. There is no default for this parameter.
To set the precedence parameter for a global IP access policy, navigate to the
policy-specific prompt and enter:
precedence
precedence
precedence
is an integer.
For example, the following command sets the precedence parameter to 5.
access-policy/policy_1# precedence 5
access-policy/policy_1#
Global IP Access Policy Example
The following command sequence creates a global access policy called no-telnet.
ip# access-policy polname no-telnet
access-policy/no-telnet# network 192.32.150.0/255.255.255.0
network/no-telnet/192.32.150.0/255.255.255.0# info
on access-policy/no-telnet
state enabled
address 192.32.150.0
mask 255.255.255.0
network/no-telnet/192.32.150.0/255.255.255.0# back
access-policy/no-telnet# info
on ip
state enabled
action deny
log on
service telnet
precedence 0
polname no-telnet
access-policy/no-telnet#
Komentarze do niniejszej Instrukcji