Cisco Catalyst 2960 Series, Configuration Manual

Page: 1281 / 2288

Examples
Review the output of the show ip access-lists command to see that the access list includes the new entries:
Device# show ip access-lists kmd1
Standard IP access list kmd1
100 permit 10.4.4.0, wildcard bits 0.0.0.255
105 permit 10.5.5.0, wildcard bits 0.0.0.255
115 permit 10.0.0.0, wildcard bits 0.0.0.255
130 permit 10.5.5.0, wildcard bits 0.0.0.255
145 permit 10.0.0.0, wildcard bits 0.0.0.255
Configuring Commented IP ACL Entries
Either use a named or numbered access list configuration. You must apply the access list to an interface or
terminal line after the access list is created for the configuration to work.
SUMMARY STEPS
1. enable
2.
configure terminal
3. ip access-list { standard | extended } { name | number }
4.
remark remark
5.
deny protocol host host-address any eq port
6. end
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. enable
Example:
Device> enable
Step 1
• Enter your password if prompted.
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 2
Identifies the access list by a name or number and enters
extended named access list configuration mode. ip access-list { standard | extended } { name | number }
Example:
Device(config)# ip access-list extended
telnetting
Step 3
Adds a remark for an entry in a named IP access list. remark remark
Example:
Device(config-ext-nacl)# remark Do not allow
host1 subnet to telnet out
Step 4
• The remark indicates the purpose of the
permit
or
deny statement.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1199
How to Configure ACLs