Cisco Catalyst 2960 Series User Manual

SUMMARY STEPS
1.
enable
2.
show ip access-lists access-list-name
3.
configure terminal
4.
ip access-list extended access-list-name
5.
no [sequence-number] permit protocol source source-wildcard destination destination-wildcard[option
option-name] [precedence precedence][tos tos] [log] [time-range time-range-name] [fragments]
6.
[sequence-number] permit protocol source source-wildcard[operator port[port]] destination
destination-wildcard[operator port[port]] [option option-name] [precedence precedence][tos tos] [log]
[time-range time-range-name] [fragments]
7.
Repeat Steps 5 and 6 as necessary, adding permit or deny statements to consolidate access list entries
where possible. Use the no sequence-number command to delete an entry.
8.
end
9.
show ip access-lists access-list-name
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
Example:
Device> enable
•
Enter your password if prompted.
(Optional) Displays the contents of the IP access list.
show ip access-lists access-list-name
Step 2
Example:
Device# show ip access-lists mylist1
•
Review the output to see if you can consolidate any
access list entries.
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 3
Specifies the IP access list by name and enters named access
list configuration mode.
ip access-list extended access-list-name
Example:
Device(config)# ip access-list extended mylist1
Step 4
Removes the redundant access list entry that can be
consolidated.
no [sequence-number] permit protocol source
source-wildcard destination destination-wildcard[option
Step 5
option-name] [precedence precedence][tos tos] [log]
[time-range time-range-name] [fragments]
•
Repeat this step to remove entries to be consolidated
because only the port numbers differ.
Example:
Device(config-ext-nacl)# no 10
•
After this step is repeated to remove the access list
entries 20, 30, and 40, for example, those entries are
removed because they will be consolidated into one
permit statement.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1194
How to Configure ACLs

Cisco Catalyst 2960 Series Specifications

General

Layer	Layer 2
Power over Ethernet (PoE)	Available on some models
RAM	128 MB
Flash Memory	32 MB
MAC Address Table Size	8000
Operating Temperature	0°C to 45°C (32 to 113°F)
Ports	24 or 48 x 10/100/1000