Cisco Systems 3750E manual Permit protocol source source-wildcard, Source-wildcard, 36-47

Chapter 36 Configuring QoS

Configuring Standard QoS

Beginning in privileged EXEC mode, follow these steps to create an IP extended ACL for IP traffic:

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	access-listaccess-list-number {deny	Create an IP extended ACL, repeating the command as many times as
	permit} protocol source source-wildcard	necessary.
	destination destination-wildcard	• For access-list-number, enter the access list number. The range is
		100 to 199 and 2000 to 2699.
		• Use the permit keyword to permit a certain type of traffic if the
		conditions are matched. Use the deny keyword to deny a certain
		type of traffic if conditions are matched.
		• For protocol, enter the name or number of an IP protocol. Use the
		question mark (?) to see a list of available protocol keywords.
		• For source, enter the network or host from which the packet is
		being sent. You specify this by using dotted decimal notation, by
		using the any keyword as an abbreviation for source 0.0.0.0
		source-wildcard255.255.255.255, or by using the host keyword
		for source 0.0.0.0.
		• For source-wildcard, enter the wildcard bits by placing ones in the
		bit positions that you want to ignore. You specify the wildcard by
		using dotted decimal notation, by using the any keyword as an
		abbreviation for source 0.0.0.0 source-wildcard255.255.255.255,
		or by using the host keyword for source 0.0.0.0.
		• For destination, enter the network or host to which the packet is
		being sent. You have the same options for specifying the
		destination and destination-wildcard as those described by source
		and source-wildcard.
		Note When creating an access list, remember that, by default, the end
		of the access list contains an implicit deny statement for
		everything if it did not find a match before reaching the end.
Step 3
	end	Return to privileged EXEC mode.
Step 4
	show access-lists	Verify your entries.
Step 5
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

To delete an access list, use the no access-listaccess-list-numberglobal configuration command.

This example shows how to create an ACL that permits IP traffic from any source to any destination that has the DSCP value set to 32:

Switch(config)# access-list 100 permit ip any any dscp 32

This example shows how to create an ACL that permits IP traffic from a source host at 10.1.1.1 to a destination host at 10.1.1.2 with a precedence value of 5:

Switch(config)# access-list 100 permit ip host 10.1.1.1 host 10.1.1.2 precedence 5

This example shows how to create an ACL that permits PIM traffic from any source to a destination group address of 224.0.0.2 with a DSCP set to 32:

Switch(config)# access-list 102 permit pim any 224.0.0.2 dscp 32

	Catalyst 3750-E and 3560-E Switch Software Configuration Guide
OL-9775-02		36-47