ACL Commands 95
Default Configuration
No IPv4 access list is defined.
Command Mode
IP-Access List Configuration mode.
User Guidelines
• Use the
ip access-list
Global Configuration mode command to enable the IP-Access List
Configuration mode.
• Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE
is added, an implied
deny-any-any
condition exists at the end of the list and those packets that do not
match the defined conditions are denied.
Example
The following example shows how to define a permit statement for an IP ACL.
mac access-list
The mac access-list Global Configuration mode command creates Layer 2 ACLs. Use the no form of this
command to delete an ACL.
Syntax
•
mac access-list
name
•
no mac access-list
name
•
name
— Specifies the name of the ACL.
Default Configuration
No MAC access list is defined.
Command Mode
Global Configuration mode.
User Guidelines
MAC ACLs are defined by a unique name. IP-based ACLs and MAC-based ACLs cannot share the same
name.
Console(config)# ip access-list ip-acl1
Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any
book.book Page 95 Thursday, December 18, 2008 7:40 PM
To Next Page
Loading...
