Command Reference ACL Commands
Global or interface configuration mode.
Use this command to control access to a specified interface, globally.
The following example applies the ACL 120 on interface fastEthernet0/0 to filter the incoming
packets:
Ruijie(config)# interface fastEthernet 0/0
Ruijie(config-if)# ip access-group 120 in
Use this command to create a standard IP access list or extended IP access list. Use the no form of
the command to remove the access list.
ip access-list {extended | standard} {id | name}
no ip access-list {extended | standard} {id | name}
Access list number:
Standard: 1 to 99, 1300 to 1999;
Extended: 100 to 199, 2000 to 2699.
Global configuration mode
Configure a standard access list if you need to filter on source address only. If you want to filter on
anything other than source address, you need to create an extended access list.
Refer to deny or permit in the two modes. Use the show access-lists command to display the ACL
configurations.
The following example creates a standard access list named std-acl.