Cisco Nexus 5500 Series Command Reference Manual page 183

Chapter P Commands
•
•
•
•
Examples This example shows how to configure an IPv4 ACL named acl-lab-01 with rules permitting all TCP and
UDP traffic from the 10.23.0.0 and 192.168.37.0 networks to the 10.176.0.0 network:
switch(config)# ip access-list acl-lab-01
switch(config-acl)# permit ip 10.23.0.0/16 10.176.0.0/16
switch(config-acl)# permit ip 192.168.37.0/16 10.176.0.0/16
Related Commands Command
deny (IPv4)
ip access-list
remark
show ip access-lists
OL-27883-02
Address and network wildcard—You can use an IPv4 address followed by a network wildcard to
specify a host or a network as a source or destination. The syntax is as follows:
IPv4-address network-wildcard
This example shows how to specify the source argument with the IPv4 address and network wildcard
for the 192.168.67.0 subnet:
switch(config-acl)# permit ip 192.168.67.0 0.0.0.255 any
Address and variable-length subnet mask—You can use an IPv4 address followed by a
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
IPv4-address/prefix-len
This example shows how to specify the source argument with the IPv4 address and VLSM for the
192.168.67.0 subnet:
switch(config-acl)# permit ip 192.168.67.0/24 any
Host address—You can use the host keyword and an IPv4 address to specify a host as a source or
destination. The syntax is as follows:
host IPv4-address
This syntax is equivalent to IPv4-address/32 and IPv4-address 0.0.0.0.
This example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# permit ip host 192.168.67.132 any
Any address—You can use the any keyword to specify that a source or destination is any IPv4
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
Description
Configures a deny rule in an IPv4 ACL.
Configures an IPv4 ACL.
Configures a remark in an ACL.
Displays all IPv4 ACLs or one IPv4 ACL.
Cisco Nexus 5500 Series NX-OS Security Command Reference
permit ip (IPv4)
169