25-9
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 25 Configuring Network Securi t y w it h ACLs Configuring ACLs

Creating a Numbered Standard ACL

Note For info rmati on about cr eati ng ACLs to apply to a manage ment int erface, ref er to the “Configuring IP
Services” sec tion of th e Cisco IOS IP and IP Routing Configuration Guide and the Command Refer ence
for IOS R e leas e 12. 1. You can the se apply th ese ACLs only t o a manage ment inte rface.
Beginning in privileged EX EC mode, fol low these steps to cr eate a numbe red stan dard IP ACL:
Use th e no access-list access-list-number global configuratio n command to delete the entire ACL. You
cannot dele te individual ACEs from n um bere d ac cess lists.
Note When creating an ACL, remember that, by default, the end of the ACL contains an implicit deny
statement for all packets that it did not find a match for before reaching the end. With standard access
lists, if you omit th e mask from an associated IP host address ACL specification, 0.0.0.0 is assumed to
be the ma sk.
Command Purpose
Step 1 config ure terminal Enter g lob al c onfigura tion m ode .
Step 2 access-list access-list-number {deny | permit |
remark} {source source-wildcard | host source
| any}
Define a standa rd IP ACL by using a source address and wildca rd.
The access-list- number is a decimal number from 1 to 99 or 1300
to 1999.
Enter deny or permit to specify whether to deny o r permit access
if co ndit ions a re m atc hed.
The source is the source address of the network or host from which
the packet is being sent:
•The 32-bit quantity in dotted-decimal format.
•The keyword any as an abbreviation for source and
source-wildcard of 0.0.0.0 255.255.255.255. You do not need
to enter a source wildcard.
•The keyword host as an abbreviation for source and
source-wildcard of source 0.0.0.0 .
(Optional) The source-wildcard applies wildcard bits to the
source. (See first bullet item.)
Note The log option is not supp orted on the switch es.
Step 3 end Return to pr ivileged EX EC m ode.
Step 4 show access-lists [numb er | name] Show the access list configuration.
Step 5 copy running-config startup-config (Optional) Save your entries in the configuration file.