IPv4 Access Control Lists (ACLs)
Configuring and Assigning an ACL
Note For a summary of ACL commands, refer to table 9-1, “Comprehensive Com-
mand Summary”, on page 9-6.
Syntax: [no] access-list
Creates an ACE in the specified (1-99) access list and
indicates the action (deny or permit) to take on a packet if
there is a match between the packet and the criterion in the
entry. If the ACL does not already exist, this command
creates the specified ACL and its first ACE. To create a
named ACL, refer to “Configuring a Named ACL” on page
9-51
< 1-99 >
Specifies the ACL ID number. The switch interprets an ACL
with a value in this range as a standard ACL.
Note: To create an access list with an alphanumeric name
(name-str) instead of a number, refer to “Configuring a
Named ACL” on page 9-51.
< deny | permit >
Specifies whether to deny (drop) or permit (forward) a
packet that matches the ACE criteria.
< any | host < src-ip-addr > | ip-addr / mask-length >
• any — Performs the specified action on any IP packet. Use
this criterion to designate packets from any IP address
.
•
host < host ip-address > — Performs the specified action on
any IP packet having the < host ip-address > as the source.
Use this criterion to designate packets from a single IP
address.
9-41
To Next Page
Loading...
