Web
– Specify the action (i.e., Permit or Deny). Select the address type (Any, Host,
or IP). If you select “Host,” enter a specific address. If y ou se le ct “IP, ” e nte r a sub net
address and the mask for an address range. Then click Add.
Figure 7-2 ACL Configuration - Standa rd IPv 4
CLI
– This example configures one permit rule for the specific address 10 .1.1.21
and another rule for the address range 168.92.16.x – 168.92.3 1.x usin g a bitmask.
Configuring Access Control Lists

7
Console(config-std-acl)#permit host 10.1.1.21
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std
-
a
cl)#
26
-
2
Configuring an Extended IPv4 ACL
Command Attributes
• Action – An ACL can contain any combinat ion of permit o r deny rules .
• Source/Destination Address Ty pe – Specifies t he source or d estination IP
address. Use “Any” to include all possible addresses, “Host” t o specify a sp ecific
host address in the Address field, or “IP” to spe cify a range of ad dresses wit h the
Address and SubMask fields. (Options: Any, Host, IP; Default: Any)
• Source/Destination IP Addres s – Sourc e or destinatio n IP addr ess.
• Source/Destination Subnet Mask – Subnet m ask for sour ce or destin ation
address. (See the description for SubMask on page 2.)
• Service Type – Packet priority settings based on the followi ng criteria:
- Precedence – IP precedence level. (Range: 0-7)
- TOS – Type of Service level. (Range: 0-15)
- DSCP – DSCP priority level. (Range: 0-63)
• Protocol – Specifies the protocol type to match as TCP, UDP or Others, whe re
others indicates a specific protocol number (0-255). (Options: TCP, UDP, Others;
Default: TCP)

7-3