115
list Print command list
no Negate a command or set its defaults
quit Exit current mode and down to previous mode
Add IP Standard
access list
Switch(config)# ip access-list
extended Extended access-list
standard Standard access-list
Switch(config)# ip access-list standard
<1-99> Standard IP access-list number
<1300-1999> Standard IP access-list number (expanded
range)
WORD Access-list name
Switch(config)# ip access-list standard 1
Switch(config-std-acl)#
deny Specify packets to reject
permit Specify packets to forward
end End current mode and change to enable mode
exit Exit current mode and down to previous mode
list Print command list
no Negate a command or set its defaults
quit Exit current mode and down to previous mode
remark Access list entry comment
Add IP Extended
access list
Switch(config)# ip access-list extended
<100-199> Extended IP access-list number
<2000-2699> Extended IP access-list number (expanded
range)
WORD access-list name
Switch(config)# ip access-list extended 100
Switch(config-ext-acl)#
deny Specify packets to reject
permit Specify packets to forward
end End current mode and down to previous mode
exit Exit current mode and down to previous mode
list Print command list
no Negate a command or set its defaults
quit Exit current mode and down to previous mode
remark Access list entry comment
Example 1: Edit MAC
access list
Switch(config-ext-macl)#permit
MACADDR Source MAC address xxxx.xxxx.xxxx
any any source MAC address
host A single source host
Switch(config-ext-macl)#permit host
MACADDR Source MAC address xxxx.xxxx.xxxx
Switch(config-ext-macl)#permit host 0012.7711.2233
MACADDR Destination MAC address xxxx.xxxx.xxxx
any any destination MAC address
host A single destination host
Switch(config-ext-macl)#permit host 0012.7711.2233 host
MACADDR Destination MAC address xxxx.xxxx.xxxx
Switch(config-ext-macl)#permit host 0012.7711.2233 host
0011.7711.2234
[IFNAME] Egress interface name
Switch(config-ext-macl)#permit host 0012.7711.2233 host
0011.7711.2234 gi25
Note: MAC Rule: Permit/Deny wildcard Source_MAC wildcard
Dest_MAC Egress_Interface
Example 1: Edit IP
Switch(config)# ip access-list extended 100
