Ip Access-List - Cisco Catalyst 2950 Command Reference Manual

Chapter 2 Cisco IOS Commands

ip access-list

Use the ip access-list global configuration command to create an IP access control list (ACL) to be used
for matching packets to an ACL whose name or number you specify and to enter access-list configuration
mode. Use the no form of this command to delete an existing IP ACL and return to global configuration
mode.
This command is available on physical interfaces only if your switch is running the enhanced software
image (EI).
Syntax Description
access-list-number
name
Defaults
No named or numbered IP ACLs are defined.
Command Modes
Global configuration
Command History Release
12.1(6)EA2
Usage Guidelines
Use this command to enter access-list configuration mode and to specify the name or number of the IP
ACL for which you want to create or modify ACL match criteria. In this mode, you must enter the permit
and deny commands to configure the permit and deny access conditions for this list.
Use the ip access-list command and its subcommands to define packet classification and marking as part
of a globally-named service policy applied on a per-interface basis or as an IP access group applied on
a per-interface basis.
Specifying standard or extended with the ip access-list command determines the prompt that you get
when you enter access-list configuration mode.
Note For more information about configuring IP ACLs, refer to the "Configuring Network Security with
ACLs" chapter in the Catalyst 2950 Desktop Switch Software Configuration Guide for this release.
78-11381-05
ip access-list {extended | standard} {access-list-number | name}
no ip access-list {extended | standard} {access-list-number | name}
Number of an ACL.
For standard IP ACLs, the range is from 1 to 99 and 1300 to 1999.
For extended IP ACLs, the range from 100 to 199 and from 2000 to 2699.
Name of an ACL.
Note
Modification
This command was first introduced.
The ACL name must begin with an alphabetic character to prevent
ambiguity with numbered ACLs. A name also cannot contain a space or
quotation mark.
Catalyst 2950 Desktop Switch Command Reference
ip access-list
2-71