access-list (standard)
23-76 Authentication and Authorization Configuration
(standard)”onpage 23‐76.Fordetailsonconfiguringextendedaccesslists,referto“access‐list
(extended)”onpage 23‐77
.
C2(su)->router#show access-lists 101
Extended IP access list 101
1: permit icmp host 18.2.32.130 any
2: permit udp host 198.92.32.130 host 171.68.225.126
3: deny ip 150.136.0.0 0.0.255.255 224.0.0.0 15.255.255.255
4: deny ip 11.6.0.0 0.1.255.255 224.0.0.0 15.255.255.255
5: deny ip 172.24.24.0 0.0.1.255 224.0.0.0 15.255.255.255
access-list (standard)
UsethiscommandtodefineastandardIPaccesslistbynumberwhenoperatinginroutermode.
Thenoformofthiscommandremovesthedefinedaccesslistorentry.
Syntax
To create an ACL entry:
access-list access-list-number {deny | permit} source [source-wildcard]
no access-list access-list-number [entry]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
Defaults
Ifinsert,replaceormovearenotspecified,thenewentrywillbeappendedtotheaccesslist.
access‐list‐
number
Specifiesastandardaccesslistnumber.Validvaluesarefrom1to99.
deny|permit Deniesorpermitsaccessifspecifiedconditionsaremet.
source Specifiesthenetworkorhostfrom
whichthepacketwillbesent.Valid
optionsforexpressingsourceare:
•IPaddressorrangeofaddresses(A.B.C.D)
• any‐Anysourcehost
• hostsource‐IPaddressofasinglesourcehost
source‐wildcard (Optional)Specifiesthebitstoignoreinthesourceaddress.
insert|replace
entry
(Optional)Insertsthisnewentry
beforeaspecifiedentryinanexistingACL,
orreplacesaspecifiedentrywiththisnewentry.
movedestination
source1source2
(Optional)Movesasequenceofaccesslistentriesbeforeanotherentry.
Destinationisthenumberoftheexistingentrybeforewhichthisnewentry
willbemoved.Source1isasingle
entrynumberorthefirstentrynumberin
therangetobemoved.Source2(optional)isthelastentrynumberinthe
rangetobemoved.Ifsource2isnotspecified,onlythesource1entrywillbe
moved.
To Next Page
Loading...
Need help?
General