Creating A Numbered Standard Acl - Cisco Catalyst 2928 Software Configuration Manual

Configuring IPv4 ACLs
Table 30-1
Access List Number
500–599
600–699
700–799
800–899
900–999
1000–1099
1100–1199
1200–1299
1300–1999
2000–2699
In addition to numbered standard and extended ACLs, you can also create standard and extended named
Note
IP ACLs by using the supported numbers. That is, the name of a standard IP ACL can be 1 to 99; the
name of an extended IP ACL can be 100 to 199. The advantage of using named ACLs instead of
numbered lists is that you can delete individual entries from a named list.

Creating a Numbered Standard ACL

Beginning in privileged EXEC mode, follow these steps to create a numbered standard ACL:
Command
Step 1
configure terminal
Step 2
access-list access-list-number {deny | permit}
source [source-wildcard]
Catalyst 2928 Switch Software Configuration Guide
30-6
Access List Numbers (continued)
Type
XNS extended access list
AppleTalk access list
48-bit MAC address access list
IPX standard access list
IPX extended access list
IPX SAP access list
Extended 48-bit MAC address access list
IPX summary address access list
IP standard access list (expanded range)
IP extended access list (expanded range)
Purpose
Enter global configuration mode.
Define a standard IPv4 access list by using a source address and
wildcard.
The access-list-number is a decimal number from 1 to 99 or 1300
to 1999.
Enter deny or permit to specify whether to deny or permit access
if conditions are matched.
The source is the source address of the network or host from which
the packet is being sent specified as:
The 32-bit quantity in dotted-decimal format.
•
The keyword any as an abbreviation for source and
•
source-wildcard of 0.0.0.0 255.255.255.255. You do not need
to enter a source-wildcard.
The keyword host as an abbreviation for source and
•
source-wildcard of source 0.0.0.0.
(Optional) The source-wildcard applies wildcard bits to the
source.
Chapter 30 Configuring Network Security with ACLs
Supported
No
No
No
No
No
No
No
No
Yes
Yes
OL-23389-01