Ip Access-List - Cisco Catalyst 2950 Command Reference Manual

ip access-list

ip access-list
Use the ip access-list global configuration command to create an IP access control list (ACL) to be used
for matching packets to an ACL whose name or number you specify and to enter access-list configuration
mode. Use the no form of this command to delete an existing IP ACL and to return to global
configuration mode.
This command is available on physical interfaces only if your switch is running the enhanced software
image (EI).
Syntax Description
access-list-number
name
Defaults No named or numbered IP ACLs are defined.
Command Modes Global configuration
Command History Release
12.1(6)EA2
Usage Guidelines Use this command to enter access-list configuration mode and to specify the name or number of the IP
ACL for which you want to create or modify ACL match criteria. In this mode, you must enter the permit
and deny commands to configure the permit and deny access conditions for this list.
Use the ip access-list command and its subcommands to define packet classification and marking as part
of a globally-named service policy applied on a per-interface basis or as an IP access group applied on
a per-interface basis.
Specifying standard or extended with the ip access-list command determines the prompt that you get
when you enter access-list configuration mode.
Note For more information about configuring IP ACLs, see the "Configuring Network Security with ACLs"
chapter in the software configuration guide for this release.
Catalyst 2950 and Catalyst 2955 Switch Command Reference
2-130
ip access-list {extended | standard} {access-list-number | name}
no ip access-list {extended | standard} {access-list-number | name}
Number of an ACL.
For standard IP ACLs, the range is 1 to 99 and 1300 to 1999.
For extended IP ACLs, the range 100 to 199 and 2000 to 2699.
Name of an ACL.
The ACL name must begin with an alphabetic character to prevent ambiguity
with numbered ACLs. A name also cannot contain a space or quotation mark.
Modification
This command was introduced.
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
OL-10102-01