Chapter 9
| Access Control Lists
IPv4 ACLs
– 320 –
access-list ip This command adds an IP access list and enters configuration mode for standard or
extended IPv4 ACLs. Use the no form to remove the specified ACL.
Syntax
[no] access-list ip {standard | extended} acl-name
standard – Specifies an ACL that filters packets based on the source IP
address.
extended – Specifies an ACL that filters packets based on the source or
destination IP address, and other more specific criteria.
acl-name – Name of the ACL. (Maximum length: 32 characters, no spaces or
other special characters)
Default Setting
None
Command Mode
Global Configuration
Command Usage
â—† When you create a new ACL or enter configuration mode for an existing ACL,
use the permit or deny command to add new rules to the bottom of the list.
â—† To remove a rule, use the no permit or no deny command followed by the
exact text of a previously configured rule.
â—† An IPv4 ACL can contain up to 119 rules.
Example
Console(config)#access-list ip standard david
Console(config-std-acl)#
Related Commands
permit, deny (322)
ip access-group (326)
show ip access-list (327)
To Next Page
Loading...
Need help?
General
