Access Control List Commands 4

This permits all TCP packets from class C addresses 192.168.1.0 with the TCP control code set to “SYN.”

Console(config-ext-acl)#permit tcp 192.168.1.0 255.255.255.0 any control-flag 2 2

Console(config-ext-acl)#

Related Commands

access-list ip (4-103)

show ip access-list

This command displays the rules for configured IP ACLs.

Syntax

show ip access-list {standard extended} [acl_name]

standard – Specifies a standard IP ACL.

extended – Specifies an extended IP ACL.

acl_name – Name of the ACL. (Maximum length: 16 characters)

Command Mode

Privileged Exec

Example

Console#show ip access-list standard IP standard access-list david:

permit host 10.1.1.21

permit 168.92.0.0 255.255.240.0 Console#

Related Commands

permit, deny 4-104

ip access-group(4-107)

ip access-group

This command binds a port to an IP ACL. Use the no form to remove the port.

Syntax

[no] ip access-group acl_name in

acl_name – Name of the ACL. (Maximum length: 16 characters)

in – Indicates that this list applies to ingress packets.

Default Setting

None

Command Mode

Interface Configuration (Ethernet)

4-107

Page 349
Image 349
Accton Technology ES3552XA, ES3526XA manual Ip access-group, Syntax Show ip access-list standard extended aclname