PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 2
Resequences the specified IP access list using the starting
sequence number and the increment of sequence numbers.
ip access-list resequence access-list-name
starting-sequence-number increment
Example:
Device(config)# ip access-list resequence kmd1
100 15
Step 3
Specifies the IP access list by name and enters named access list
configuration mode.
ip access-list {standard| extended} access-list-name
Example:
Device(config)# ip access-list standard kmd1
Step 4
•
If you specify standard, make sure you subsequently
specify permit and/or deny statements using the standard
access list syntax.
•
If you specify extended, make sure you subsequently
specify permit and/or deny statements using the extended
access list syntax.
Specifies a permit statement in named IP access list mode.Do one of the following:
Step 5
•
sequence-number permit source
source-wildcard
•
This access list happens to use a permit statement first, but
a deny statement could appear first, depending on the order
of statements you need.
•
sequence-number permit protocol source
source-wildcard destination destination-wildcard
•
As the prompt indicates, this access list was a standard
access list. If you had specified extended in Step 4, the
[precedence precedence][tos tos] [log]
[time-range time-range-name] [fragments]
prompt for this step would be Device(config-ext-nacl) and
you would use the extended permit command syntax.
Example:
Device(config-std-nacl)# 105 permit 10.5.5.5
0.0.0 255
(Optional) Specifies a deny statement in named IP access list
mode.
Do one of the following:
Step 6
•
sequence-number deny source source-wildcard
•
This access list uses a permit statement first, but a deny
statement could appear first, depending on the order of
statements you need.
•
sequence-number deny protocol source
source-wildcard destination destination-wildcard
[precedence precedence][tos tos] [log]
[time-range time-range-name] [fragments]
•
As the prompt indicates, this access list was a standard
access list. If you had specified extended in Step 4, the
prompt for this step would be Device(config-ext-nacl) and
you would use the extended deny command syntax.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1197
How to Configure ACLs
To Next Page
Loading...
