Configuring Access Control Lists access-list (standard)
34-4
Extended IP access list 145
1: permit icmp host 88.255.255.254 any
2: permit icmp any host 11.11.16.16
3: deny icmp any any
4: permit tcp host 88.255.255.254 any eq 22
5: permit udp 88.255.128.0 0.0.127.255 eq 161 any
6: permit tcp any host 230.10.230.10 eq 1234
7: deny tcp any any eq 23
8: permit ip 88.255.128.0 0.0.127.255 any
9: deny ip any 224.0.0.0 31.0.0.0
This example displays the status of IPv6 mode.
C3(su)->router#show access-lists ipv6mode
ipv6mode is enabled
This example displays the access lists associated with ge.1.1.
C3(su)->router#show access-lists interface ge.1.1
Port Access-list
-------- -----------
ge.1.1 101
This example displays all configured access lists.
C3(su)->router(Config)#show access-lists
Standard IP access list 1
1: deny 1.1.1.10 255.255.255.255
2: permit any
Extended IP access list 111
1: permit tcp any 111.111.111.1 255.255.255.255 assign-queue 5
ipv6list1 IPV6 access-list
1: deny icmpv6 2001:DB08:10::1/64 any flow-label 11111
maclist1 MAC access-list
1: permit any any ethertype arp vlan 100
access-list (standard)
Use this command to define a standard IP access list by number when operating in router mode.
The no form of this command removes the defined access list or entry.
Syntax
To create an ACL entry:
access-list access-list-number {deny | permit} source [source-wildcard] [assign-
queue queue-id]
no access-list access-list-number [entryno [entryno]]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entryno {deny | permit} source
[source-wildcard] [assign-queue queue-id]
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
To Next Page
Loading...
