Cisco Catalyst 2960 Series, Configuration Manual

Page: 1266 / 2288

DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted. enable
Example:
Switch> enable
Step 1
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 2
Defines a standard IPv4 access list by using a source address and wildcard. access-list access-list-number { deny |
permit
} source source-wildcard [
log
]
Step 3
The access-list-number is a decimal number from 1 to 99 or 1300 to 1999.
Example:
Switch(config)# access-list 2 deny
Enter deny or permit to specify whether to deny or permit access if
conditions are matched.
The source is the source address of the network or host from which the
packet is being sent specified as:
your_host
• The 32-bit quantity in dotted-decimal format.
• The keyword any as an abbreviation for source and source-wildcard
of 0.0.0.0 255.255.255.255. You do not need to enter a
source-wildcard.
• The keyword host as an abbreviation for source and source-wildcard
of source 0.0.0.0.
(Optional) The source-wildcard applies wildcard bits to the source.
(Optional) Enter log to cause an informational logging message about the
packet that matches the entry to be sent to the console.
Logging is supported only on ACLs attached to Layer 3 interfaces.
Note
Returns to privileged EXEC mode. end
Example:
Switch(config)#
end
Step 4
Verifies your entries. show running-config
Example:
Switch# show running-config
Step 5
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1184
How to Configure ACLs