Specifications

access-list (standard)
SecureStack C3 Configuration Guide 21-71
1: permit icmp host 18.2.32.130 any
2: permit udp host 198.92.32.130 host 171.68.225.126
3: deny ip 150.136.0.0 0.0.255.255 224.0.0.0 15.255.255.255
4: deny ip 11.6.0.0 0.1.255.255 224.0.0.0 15.255.255.255
5: deny ip 172.24.24.0 0.0.1.255 224.0.0.0 15.255.255.255
access-list (standard)
UsethiscommandtodefineastandardIPaccesslistbynumberwhenoperatinginroutermode.
Thenoformofthiscommandremovesthedefinedaccesslistorentry.
Syntax
To create an ACL entry:
access-list access-list-number {deny | permit} source [source-wildcard]
no access-list access-list-number [entry]
To insert or replace an ACL entry:
access-list access-list-number insert | replace entry
To move entries within an ACL:
access-list access-list-number move destination source1 [source2]
Parameters
Defaults
Ifinsert,replaceormovearenotspecified,thenewentrywillbeappendedtotheaccesslist.
Ifsource2isnotspecifiedwithmove,onlyoneentrywillbemoved.
Mode
Globalconfiguration:C3(su)‐>router(Config)#
access‐list‐
number
Specifiesastandardaccesslistnumber.Validvaluesarefrom1to99.
deny|permit Deniesorpermitsaccessifspecifiedconditionsaremet.
source Specifiesthenetworkorhostfromwhichthepacketwillbesent.Valid
optionsforexpressingsourceare:
•IPaddress
orrangeofaddresses(A.B.C.D)
• any‐Anysourcehost
• hostsource‐IPaddressofasinglesourcehost
source‐wildcard (Optional)Specifiesthebitstoignoreinthesourceaddress.
insert|replace
entry
(Optional)InsertsthisnewentrybeforeaspecifiedentryinanexistingACL,
orreplacesaspecifiedentrywith
thisnewentry.
movedestination
source1source2
(Optional)Movesasequenceofaccesslistentriesbeforeanotherentry.
Destinationisthenumberoftheexistingentrybeforewhichthisnewentry
willbemoved.Source1isasingleentrynumberorthefirstentrynumberin
therangetobemoved.
Source2(optional)isthelastentrynumberinthe
rangetobemoved.Ifsource2isnotspecified,onlythesource1entrywillbe
moved.