If Use access lists is selected, the access list is checked. If Global Write is selected, the process continues. Let us look at the steps that would be traversed if we tried to write to the TFTP server from address 192.168.1.60:
Attempts to read or write from 192.168.1.60 would fail. In this case, the range is a single IP address. Read and write settings will be applied to addresses included in this range. The second line in the access list is INCLUDE. Attempts to read or write from address 192.168.1.98 would succeed. Attempts to read or write from address 192.168.1.105 would fail. In this case anything outside of the excluded range is unable to execute read or write commands on the TFTP server. Read and write properties are applied to all addresses outside of the range 192.168.1.1 – 192.168.1.100. The first line in the access list is EXCLUDE. The information in the access list is evaluated in descending order until a match is found. Read and Write: When selected, reading or writing capability is allowed. End IP: Defines the end of the range of IP addresses to use. Start IP: Defines the start of the range of IP addresses to use. Exclude is useful for allowing only a limited range of IP's to be read or written to because everything outside of the excluded range will have the read/write settings applied to them. Inc|Ex IP Range: Determines whether the IP range specified is to have the Read and Write options applied to it ( included), or is to be exempt ( excluded) from the Read and Write options which are then applied to all addresses outside of the range. There are five columns in the access list table: List is used to ascertain the read and write permissions for the IP address in question.Īccess lists are subordinate to Global Read and Global Write. Must be selected for information to be written to the TFTP server. Must be selected for information to be read from the TFTP server.