Access Control List Commands
4-103
4
IP ACLs access-list ip
This command adds an IP access list and enters configuration mo de for standard or
extended IP ACLs. Use the no form to remove the specified ACL.
Syntax
[no] access-list ip {standard | extended} acl_name
•standard – Specifies an ACL that filters packets based on the source IP
address.
•extended – Specifies an ACL that filters packets based on the source or
destination IP address, and other more specific criteria.
•acl_name – Name of the ACL. (Maximum length: 16 characters)
Default Setting
None
Command Mode
Global Configuration
Table4-34 Access Control Li sts
Command Groups Function Page
IP ACLs Configures ACLs based on IP addresses, TCP/UDP port number,
protocol type, and TCP control code
4-103
MAC ACLs Configures ACLs based on hardware addresses, packet format, and
Ethernet type
4-110
ACL Information Displays ACLs and associated rules; shows ACLs assigned to each port 4-115
Table4-35 IP ACLs
Command Function Mode Page
access-list ip Creates an IP ACL and enters configuration mode GC 4-103
permit, deny Filters packets matching a sp ecified source IP address STD-ACL 4-104
permit, deny Filters packets meeting the s pecified criteria, including
source and destination IP address, TCP/UDP port number,
protocol type, and TCP control code
EXT-ACL 4-105
show ip access-list Displays the rules for configured IP ACLs PE 4-107
ip access-group Adds a port to an IP ACL IC 4-107
show ip access-group Shows port assignments for IP ACLs PE 4-107
map access-list ip Sets the CoS value and corresponding output queue for
packets matching an ACL rule
IC 4-108
show map access-list ip Shows CoS value mapped to an access list for an interface PE 4-109