User Manual UMN:CLI
V5808
253
Addresses that ACL controls
10.55.10.1 – 10.55.10.255
Tab. 7.3 Examples of Wildcard Masking
If you put 10.55.10.2 and 0.0.0.255 for an IP address and wildcard mask to permit, all
traffic that begins with 10.55.10.1 to 10.55.10.255 (10.55.10.0/24) are accepted. If you set
any IP address with wildcard bits 0.0.0.0, it indicates the IP address itself that should be
processed.
7.21.1 Standard Access List
To create a standard IP address-based access list entry, use the following command.
access-list {<1-99> | <1300-
1999>} {deny | permit} A.B.C.D
[WILDCARD-BITS]
Specifies a deny or permit statement of the standard
ACL with IP addresses and wildcard bits
1-99: IP standard access list
1300-1999: IP standard access list (extended range)
deny: denies packets if conditions are matched.
permit: permits packets if conditions are matched.
A.B.C.D: IP address to match
WILDCARD-BITS: bits for use of wildcard masking
access-list {<1-99> | <1300-
1999>} {deny | permit} any
Specifies a deny or permit statement of the standard
ACL with any source host.
any: any source host
access-list {<1-99> | <1300-
1999>} {deny | permit} host
A.B.C.D
Specifies a deny or permit statement of the standard
ACL with a specific host.
A.B.C.D: host address to match
access-list {<1-99> | <1300-
1999>} remark LINE
Adds comments for the standard ACL.
LINE: access list entry comments up to 100 characters
Add entries to the list by repeating the command for different IP addresses.
To delete an existing standard IP address-based access list entry, use the following
command.
no access-list {<1-99> | <1300-
1999>} {deny | permit} A.B.C.D
Deletes an entry of the standard ACL.