CLI Reference Guide ACL Configuration Commands
Use this command to create a standard IP ACL or extended IP ACL. Use the no form of the
command to remove the ACL.
ip access-list {extended | standard} {id | name}
no ip access-list {extended | standard} {id | name}
ID of the ACL 1 to 99 and 1300 to 1999 for standard ACL) or 100 to
199 and 2000 to 2699 for extended ACL
Global configuration mode.
There are differences between a standard ACL and an extended ACL. The extended ACL is more
precise. Refer to deny or permit in the two modes. Use show access-lists to display the ACL
configurations.
Create a standard ACL:
Ruijie(config)# ip access-list extended 123
Ruijie(config-ext-nacl)# show access-lists
ip access-list extended 123
Ruijie(config-ext-nacl)#
Create an extended ACL:
Ruijie(config)# ip access-list standard std-acl
Ruijie(config-std-nacl)# show access-lists
ip access-list standard std-acl
Ruijieconfig-std-nacl)#