Cisco IE 4000, Software Configuration Manual

Page: 607 / 1066

603
Configuring QoS
Configuring QoS
To delete an access list, use the no access-list access-list-number global configuration command.
This example shows how to allow access for only those hosts on the three specified networks. The wildcard bits apply
to the host portions of the network addresses.
Switch(config)# access-list 1 permit 192.5.255.0 0.0.0.255
Switch(config)# access-list 1 permit 128.88.0.0 0.0.255.255
Switch(config)# access-list 1 permit 36.0.0.0 0.0.0.255
Creating IP Extended ACLs
Beginning in privileged EXEC mode, follow these steps to create an IP extended ACL for IP traffic:
Command Purpose
1. configure terminal Enter global configuration mode.
2. access-list access-list-number
permit source [ source-wildcard ]
Create an IP standard ACL, repeating the command as many times as
necessary.

For access-list-number , enter the access list number. The range is 1 to 99
and 1300 to 1999.

Always use the permit keyword for ACLs used as match criteria in QoS
policies. QoS policies do not match ACLs that use the deny keyword.

For source , enter the network or host from which the packet is being sent.
You can use the any keyword as an abbreviation for 0.0.0.0
255.255.255.255.

(Optional) For source-wildcard , enter the wildcard bits in dotted decimal
notation to be applied to the source.
or ip access-list standard name Define a standard IPv4 access list using a name, and enter access-list
configuration mode. The name can be a number from 1 to 99.
In access-list configuration mode, enter permit source [ source-wildcard ]
3. end Return to privileged EXEC mode.
4. show access-lists Verify your entries.
5. copy running-config
startup-config (Optional) Save your entries in the configuration file.