Specifications

2-49
Catalyst 2950 and Catalyst 2955 Switch Command Reference
78-15304-01
Chapter 2 Cisco IOS Commands
deny (access-list configuration)
Examples This example shows how to create an extended IP ACL and to configure deny conditions for it:
Switch(config)# ip access-list extended Internetfilter
Switch(config-ext-nacl)# deny tcp host 190.5.88.10 any
Switch(config-ext-nacl)# deny tcp host 192.1.10.10 any
This is an example of a standard ACL that sets a deny condition:
ip access-list standard Acclist1
deny 192.5.34.0 0.0.0.255
deny 128.88.10.0 0.0.0.255
deny 36.1.1.0 0.0.0.255
Note In these examples, all other IP access is implicitly denied.
You can verify your settings by entering the show ip access-lists or show access-lists privileged EXEC
command.
Related Commands Command Description
ip access-list Defines an IP ACL.
permit (access-list
configuration)
Sets conditions for an IP ACL.
ip access-group Controls access to an interface.
show ip access-lists Displays IP ACLs configured on the switch.
show access-lists Displays ACLs configured on a switch.