Cisco Catalyst 2960 Series, Configuration Manual

Page: 1279 / 2288

Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 2
Resequences the specified IP access list using the starting
sequence number and the increment of sequence numbers.
ip access-list resequence access-list-name
starting-sequence-number increment
Example:
Device(config)# ip access-list resequence kmd1
100 15
Step 3
Specifies the IP access list by name and enters named access list
configuration mode. ip access-list { standard | extended } access-list-name
Example:
Device(config)# ip access-list standard kmd1
Step 4
• If you specify
standard
, make sure you subsequently
specify permit and/or deny statements using the standard
access list syntax.
• If you specify
extended
, make sure you subsequently
specify permit and/or deny statements using the extended
access list syntax.
Specifies a permit statement in named IP access list mode. Do one of the following: Step 5
• sequence-number permit source
source-wildcard
• This access list happens to use a
permit
statement first, but
a
deny
statement could appear first, depending on the order
of statements you need.
• sequence-number permit protocol source
source-wildcard destination destination-wildcard • As the prompt indicates, this access list was a standard
access list. If you had specified
extended in Step 4, the [
precedence precedence
][
tos tos
] [
log
]
[
time-range time-range-name
] [
fragments
] prompt for this step would be Device(config-ext-nacl) and
you would use the extended
permit
command syntax.
Example:
Device(config-std-nacl)# 105 permit 10.5.5.5
0.0.0 255
(Optional) Specifies a deny statement in named IP access list
mode. Do one of the following: Step 6
• sequence-number deny source source-wildcard
• This access list uses a
permit
statement first, but a
deny
statement could appear first, depending on the order of
statements you need.
• sequence-number deny protocol source
source-wildcard destination destination-wildcard
[ precedence precedence ][ tos tos ] [ log ]
[ time-range time-range-name ] [ fragments ]
• As the prompt indicates, this access list was a standard
access list. If you had specified
extended
in Step 4, the
prompt for this step would be Device(config-ext-nacl) and
you would use the extended
deny
command syntax.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1197
How to Configure ACLs