Ip Access-List - Cisco Nexus 7000 Series Command Reference Manual

ip access-list

ip access-list
To create an IPv4 access control list (ACL) or to enter IP access list configuration mode for a specific ACL,
use the ip access-list command. To remove an IPv4 ACL, use the no form of this command.
ip access-list access-list-name
no ip access-list access-list-name
Syntax Description
access-list-name
Command Default
None
Command Modes
Global configuration
Command History
Release
4.0(1)
Usage Guidelines
No IPv4 ACLs are defined by default.
Use IPv4 ACLs to filter IPv4 traffic.
When you use the ip access-list command, the device enters IP access list configuration mode, where you
can use the IPv4 deny and permit commands to configure rules for the ACL. If the ACL specified does not
exist, the device creates it when you enter this command.
Use the ip access-group command to apply the ACL to an interface as a router ACL. Use the ip port
access-group command to apply the ACL to an interface as a port ACL.
Every IPv4 ACL has the following implicit rule as its last rule:
deny ip any any
This implicit rule ensures that the device denies unmatched IP traffic.
Unlike IPv6 ACLs, IPv4 ACLs do not include additional implicit rules to enable the neighbor discovery
process. The Address Resolution Protocol (ARP), which is the IPv4 equivalent of the IPv6 neighbor discovery
process, uses a separate data link layer protocol. By default, IPv4 ACLs implicitly allow ARP packets to be
sent and received on an interface.
Use the statistics per-entry command to configure the device to record statistics for each rule in an IPv4
ACL. The device does not record statistics for implicit rules. To record statistics for packets that would match
the implicit deny ip any any rule, you must explicitly configure an identical rule.
This command does not require a license.
Cisco Nexus 7000 Series Security Command Reference
378
Name of the IPv4 ACL. The name has a maximum
of 64 alphanumeric, case-sensitive characters but
cannot contain a space or quotation mark.
Modification
This command was introduced.
I Commands