Extended IP ACL with the any Keyword
To use an abbreviation for a source and source wildcard of 0.0.0.0 255.255.255.255 and an abbreviation for
a destination and destination wildcard of 0.0.0.0 255.255.255.255 when defining an extended IP ACL, use
the any keyword in place of source and destination address and wildcard:
Switch# configure terminal
Switch(config)# access-list 101 permit ip any any precedence 0 tos 0 fragments
log time-range workhours dscp 10
Switch(config)# end
Extended IP ACL with the host Keyword
To use an abbreviation for a source and a source wildcard of source 0.0.0.0 and an abbreviation for a destination
and destination wildcard of destination 0.0.0.0 when defining an extended IP ACL, use the host keyword in
place of the source and destination wildcard or mask.
Switch# configure terminal
Switch(config)# access-list 101 permit ip host 10.1.1.2 any
Switch(config)# end
Related Topics
Configuring VLAN Maps, on page 135
Creating Named Standard ACLs
Beginning in privileged EXEC mode, follow these steps to create a standard ACL using names:
SUMMARY STEPS
1.
configure terminal
2.
ip access-list standard name
3.
Use one of the following:
•
deny {source [source-wildcard] | host source | any} [log]
•
permit {source [source-wildcard] | host source | any} [log]]
4.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 125
Configuring IPv4 ACLs
Creating Named Standard ACLs
To Next Page
Loading...
