Access Control List Commands
4-85
4
IP ACLs access-list ip
This command adds an IP access list and enters configuration mo de for standard or
extended IP ACLs. Use the no form to remove the specified ACL.
Syntax
[no] access-list ip {standard | extended} acl_name
•standard – Specifies an ACL that filters packets based on the source IP
address.
•extended – Specifies an ACL that filters packets based on the source or
destination IP address, and other more specific criteria.
•acl_name – Name of the ACL. (Maximum length: 16 characters)
Default Setting
None
Command Mode
Global Configuration
Table4-33. IP ACLs
Command Function Mode Page
access-list ip Creates an IP ACL and enters configuration mode GC 4-85
permit, deny Filters packets matching a specified source IP ad dress STD-ACL 4-86
permit, deny Filters packets meeting the specified criteria, inclu ding
source and destination IP address, TCP/UDP port number,
protocol type, and TCP control code
EXT-ACL 4-87
show ip access-list Displays the rules for configured IP ACLs PE 4-89
access-list ip
mask-precedence Changes to the mode for configuring access control mas ks GC 4-89
mask Sets a precedence mask for the ACL rules IP-Mask 4-90
show access-list ip
mask-precedence Shows the ingress or egress rule masks for IP ACLs PE 4-93
ip access-group Adds a port to an IP ACL IC 4-94
show ip access-group Shows port assignments for IP ACLs PE 4-94
map access-list ip Sets the CoS value and c orresponding output queue for
packets matching an ACL rule IC 4-95
show map access-list ip Shows CoS value mapped to an access list for an interface PE 4-96
match access-list ip Changes the 802.1p priority, IP Precedence, or DSCP
Priority of a frame matching the defined rule (i.e., also called
packet marking)
IC 4-96
show marking Displays the current configuration for packet marking PE 4-97