User Manual

action : Action for the access condition
Setting value Description
deny
Specifies "deny" as the action for the access
condition
permit
Specifies "permit" as the action for the access
condition
src-info : Transmission-source IPv4 address that is the condition
Setting value Description
A.B.C.D E.F.G.H
Specifies the condition as an IPv4 address
(A.B.C.D) with wildcard bits (E.F.G.H)
any
Don't specify the transmission-source IPv4
address (accept all IPv4 address)
[Input mode]
global configuration mode
[Description]
Generates a standard IPv4 access list.
When generating a list, you can either specify a defined ID or assign a desired name.
If you want to apply this to traffic classification conditions, execute the match access-group command in class map mode.
For a single ID, you can repeat this to make up to 30 registrations.
[Note]
In order to execute this command, QoS must be enabled.
An error occurs if the maximum number of registrations is exceeded, or if you specify content that is already registered.
[Example]
Create a standard IPv4 access list #2 which permits packets from 192.168.1.0/24 through 192.168.2.0/24
SWP1(config)#ip-access-list 2 permit 192.168.1.0 0.0.0.255
SWP1(config)#ip-access-list 2 permit 192.168.2.0 0.0.0.255
Create a standard IP access list "TEST" which permits packets from 192.168.1.0/24 through 192.168.2.0/24
SWP1(config)#ip-access-list standard TEST permit 192.168.1.0 0.0.0.255
SWP1(config)#ip-access-list standard TEST permit 192.168.2.0 0.0.0.255
Delete 192.168.1.0/24 from standard IPv4 access list #2
SWP1(config)#no ip-access-list 2 permit 192.168.1.0 0.0.0.255
Delete 192.168.1.0/24 from standard IP access list "TEST"
SWP1(config)#no ip-access-list standard TEST permit 192.168.1.0 0.0.0.255
13.2.26 Generate extended IPv4 access list
[Syntax]
ip-access-list list-id action protocol src-info dst-info
ip-access-list extended name action protocol src-info dst-info
no ip-access-list list-id action protocol src-info dst-info
no ip-access-list extended name action protocol src-info dst-info
[Parameter]
list-id : <100 - 199>|<2000 - 2699>
Extended IPv4 access list ID
name : Name of access list (Maximum 32 characters; uppercase and lowercase are distinguished. You cannot
specify a text string consisting only of numerals.)
Command Reference | Traffic control | 195