Creating A Numbered Standard Acl - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Configuring IPv4 ACLs
Table 31-1
Access List Number
1300–1999
2000–2699
In addition to numbered standard and extended ACLs, you can also create standard and extended named
Note
IP ACLs by using the supported numbers. That is, the name of a standard IP ACL can be 1 to 99; the
name of an extended IP ACL can be 100 to 199. The advantage of using named ACLs instead of
numbered lists is that you can delete individual entries from a named list.
Creating a Numbered Standard ACL
Beginning in privileged EXEC mode, follow these steps to create a numbered standard ACL:
Command
Step 1
configure terminal
Step 2
access-list access-list-number {deny | permit}
source [source-wildcard]
Step 3
end
Step 4
show access-lists [number | name]
Step 5
copy running-config startup-config
Use the no access-list access-list-number global configuration command to delete the entire ACL. You
cannot delete individual ACEs from numbered access lists.
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
31-8
Access List Numbers (continued)
Type
IP standard access list (expanded range)
IP extended access list (expanded range)
Purpose
Enter global configuration mode.
Define a standard IPv4 access list by using a source address and
wildcard.
The access-list-number is a decimal number from 1 to 99 or 1300
to 1999.
Enter deny or permit to specify whether to deny or permit access
if conditions are matched.
The source is the source address of the network or host from which
the packet is being sent specified as:
•
The 32-bit quantity in dotted-decimal format.
The keyword any as an abbreviation for source and
•
source-wildcard of 0.0.0.0 255.255.255.255. You do not need
to enter a source-wildcard.
The keyword host as an abbreviation for source and
•
source-wildcard of source 0.0.0.0.
Note
Return to privileged EXEC mode.
Show the access list configuration.
(Optional) Save your entries in the configuration file.
Chapter 31
Configuring Network Security with ACLs
(Optional) The source-wildcard applies wildcard bits to
the source.
Supported
Yes
Yes
OL-26520-01
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
