Chapter 10
| Access Control Lists
IPv4 ACLs
– 318 –
access-list ip
This command adds an IP access list and enters configuration mode for
standard or extended IPv4 ACLs. Use the
no
form to remove the specified
ACL.
Syntax
[
no
]
access-list ip
{
standard
|
extended
}
acl-name
standard
– Specifies an ACL that filters packets based on the
source IP address.
extended
– Specifies an ACL that filters packets based on the
source or destination IP address, and other more specific criteria.
acl-name
– Name of the ACL. (Maximum length: 32 characters)
Default Setting
None
Command Mode
Global Configuration
Command Usage
◆
When you create a new ACL or enter configuration mode for an existing
ACL, use the
permit
or
deny
command to add new rules to the bottom of
the list.
◆
To remove a rule, use the
no permit
or
no deny
command followed by the
exact text of a previously configured rule.
◆
An ACL can contain up to 1K rules.
Example
Console(config)#access-list ip standard david
Console(config-std-acl)#
Related Commands
permit, deny (319)
show ip access-list (323)
Shows port assignments for IPv4 ACLs
PE
Displays the rules for configured IPv4 ACLs
PE
Table 63: IPv4 ACL Commands
Command
Function
Mode
