access-list ip
This command adds an IP access list and enter s co nfigu ra tio n mod e fo r standa rd or
extended IPv4 ACLs. Use the
no
form to remove the specified ACL.
Syntax
[
no
]
access-list ip
{
standard
|
extended
} acl_name
• standard – Specifies an ACL that filters packets ba sed on the sourc e IP
address.
• extended – Specifies an ACL that filters packets ba sed on the source o r
destination IP address, and other more specific criteria.
• acl_name – Name of the ACL. (Maximu m length: 16 c haracters )
Default Setting
None
Command Mode
Global Configuration
Command Usage
• When you create a new ACL or enter configuration mode for an existing ACL,
use the permit or deny command to add new r ules to t he bot tom of the list.
To create an ACL, you must add at least one rule to the list.
• To remove a rule, use the no permit or no deny command followed by the
exact text of a previously configured rule.
• An ACL can contain up to 32 rules.
Example
Console(config)#access-list ip standard david
Console(config-std-acl)#
Related Commands
permit, deny 26-2
ip access-group (26-6)
show ip access-list (26-5)
permit, deny (Standard IPv4 ACL)
This command adds a rule to a Standard IPv4 ACL. The rule sets a filter condition
for packets emanating from the specified source. Use the
no
form to remove a rule.
Syntax
[no] {permit | deny} {any | source bitmask | host source}
• any – Any source IP address.
• source – Source IP address.
• bitmask – Decimal number repres enting the address bit s to match.
• host – Keyword followed by a specific I P address.
26-2
Access Control List Commands
26