C
OMMAND
L
INE
I
NTERFACE
4-118
permit
,
deny
(Standard ACL)
This command adds a rule to a Standard IP ACL. The rule sets a filter
condition for packets emanating from the specified source. Use the
no
form
to remove a rule.
Syntax
[
no
]
{
permit | deny
}
{
any
|
source bitmask |
host
source
}
•
any
– Any source IP address.
•
source
– Source IP address.
•
bitmask
– Decimal number representing the address bits to match.
•
host
– Keyword followed by a specific IP address.
Default Setting
None
Command Mode
Standard ACL
Command Usage
• New rules are appended to the end of the list.
• Address bitmasks are similar to a subnet mask, containing four integers
from 0 to 255, each separated by a period. The binary mask uses 1 bits
to indicate “match” and 0 bits to indicate “ignore.” The bitmask is
bitwise ANDed with the specified source IP address, and then compared
with the address for each IP packet entering the port(s) to which this
ACL has been assigned.
Example
This example configures one permit rule for the specific address 10.1.1.21
and another rule for the address range 168.92.16.x – 168.92.31.x using a
bitmask.
Related Commands
access-list ip (4-117)
Console(config-std-acl)#permit host 10.1.1.21
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#
Summary of Contents for 8724ML3 - annexe 1
Page 2: ......
Page 26: ...TABLE OF CONTENTS xxvi ...
Page 64: ...MANAGING SYSTEM FILES 2 18 ...
Page 400: ...CONFIGURING THE SWITCH 3 336 ...
Page 798: ...SOFTWARE SPECIFICATIONS A 6 ...
Page 802: ...TROUBLESHOOTING B 4 ...
Page 812: ...GLOSSARY Glossary 10 ...
Page 818: ...INDEX Index 6 ...
Page 819: ......