10G Core Routing Switch User Manual
陈泽科技有限公司
- - 79 - -
www.stephen-tele.com
Step 2b
rule
rule_id
[deny | permit] sip
{
ip-address [net-mask|any]|
any}
Define a standard IP access list rule by using
a source address and net-mask.
The rule-id
is a decimal number from 0 to
127.
Enter
deny
or
permit
to specify whether to
deny or permit access if conditions are
matched.
The sip is the source address of the network
or host from which the packet is being sent
specified as:
•
The 32-bit quantity in dotted-decimal
format.
•
The keyword
any
as an abbreviation for
ip-address
and net-mask of 0.0.0.0
255.255.255.255. You do not need to enter a
net-mask.
Step 4
show access-list
access-list-number
Verify your entries.
Step 5
Copy running-config startup-config
(Optional) Save your entries in the
configuration file.
To delete a ACL, use
no access-list
access-list-number
global configuration command.
To delete a standard ACL rule, use
no rule
rule_id
standard ACL configuration command
.
Creating a Numbered Extended ACL
Beginning in privileged EXEC mode, follow these steps to create a numbered extended ACL:
Command
Purpose
Step 1
config terminal
Enter global configuration mode.
Step 2
access-list
access-list-number
Enter the extended ACL configuration mode.
The
access-list-number
is a decimal number from 100
to 199.