Creating A Numbered Standard Acl - Cisco 2950 - Catalyst Switch Configuration Manual

Chapter 29 Configuring Network Security with ACLs

Creating a Numbered Standard ACL

For information about creating ACLs to apply to a management interface, refer to the "Configuring IP
Note
Services" section of the Cisco IOS IP and IP Routing Configuration Guide, Cisco IOS Release 12.1 and
the Cisco IOS IP and IP Routing Command Reference, Cisco IOS Release 12.1. You can these apply
these ACLs only to a management interface.
Beginning in privileged EXEC mode, follow these steps to create a numbered standard IP ACL:
Command
Step 1
configure terminal
Step 2 access-list access-list-number {deny | permit |
remark} {source source-wildcard | host source
| any}
Step 3 end
Step 4
show access-lists [number | name]
Step 5
copy running-config startup-config
Use the no access-list access-list-number global configuration command to delete the entire ACL. You
cannot delete individual ACEs from numbered access lists.
When creating an ACL, remember that, by default, the end of the ACL contains an implicit deny
Note
statement for all packets that it did not find a match for before reaching the end. With standard access
lists, if you omit the mask from an associated IP host address ACL specification, 0.0.0.0 is assumed to
be the mask.
78-11380-10
Purpose
Enter global configuration mode.
Define a standard IP ACL by using a source address and wildcard.
The access-list-number is a decimal number from 1 to 99 or 1300
to 1999.
Enter deny or permit to specify whether to deny or permit access
if conditions are matched.
The source is the source address of the network or host from which
the packet is being sent:
The 32-bit quantity in dotted-decimal format.
•
The keyword any as an abbreviation for source and
•
source-wildcard of 0.0.0.0 255.255.255.255. You do not need
to enter a source wildcard.
• The keyword host as an abbreviation for source and
source-wildcard of source 0.0.0.0.
(Optional) The source-wildcard applies wildcard bits to the
source. (See first bullet item.)
The log option is not supported on the switches.
Note
Return to privileged EXEC mode.
Show the access list configuration.
(Optional) Save your entries in the configuration file.
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Configuring ACLs
29-9