A
CCESS
C
ONTROL
L
ISTS
3-75
select “IP,” enter a subnet address and the mask for an address range. Then
click Add.
CLI – This example configures one permit rule for the specific address
10.1.1.21 and another rule for the address range 168.92.16.x – 168.92.31.x
using a bitmask.

Configuring an Extended IP ACL

Command Attributes
Action – An ACL can contain either all permit rules or all deny rules.
(Default:Permit rules)
Src/Dst IP – Specifies the source or destination IP address. Use
“Any” to include all possible addresses, “Host” to specify a specific
host address in the Address field, or “IP” to specify a range of
addresses with the Address and SubMask fields. (Options: Any, Host,
IP; Default: Any)
Src/Dst Address – Source or destination IP address.
Src/Dst SubMask – Subnet mask for source or destination address.
Console(config-std-acl)#permit host 10.1.1.213-117
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#