125
[IFNAME] Egress interface name
Switch(config-ext-macl)#permit host
0007.7c11.2233 host 0011.7711.2234 gi25
Note: MAC Rule: Permit/Deny wildcard Source_MAC
wildcard Dest_MAC Egress_Interface
Example 1: Edit IP
Extended access list
Switch(config)# ip access-list extended 100
Switch(config-ext-acl)#permit
ip Any Internet Protocol
tcp Transmission Control Protocol
udp User Datagram Protocol
icmp Internet Control Message Protocol
Switch(config-ext-acl)#permit ip
A.B.C.D Source address
any Any source host
host A single source host
Switch(config-ext-acl)#permit ip
192.168.20.200
A.B.C.D Source wildcard bits
Switch(config-ext-acl)#permit ip
192.168.20.200 0.0.0.1
A.B.C.D Destination address
any Any destination host
host A single destination host
Switch(config-ext-acl)#permit ip
192.168.20.200 0.0.0.1 192.168.2.201 0.0.0.1
[IFNAME] Egress interface name
Switch(config-ext-acl)#permit ip
192.168.20.200 0.0.0.1 192.168.2.201 0.0.0.1
gi17
Note: Follow the below rule to configure ip
extended access list.
IP Rule: Permit/Deny Source_IP wildcard Dest_IP
wildcard Egress_Interface
TCP Rule: Permit/Deny tcp Source_IP wildcard
Dest_IP wildcard eq Given_Port_Number
Egress_Interface
