Creating Named Standard Acls - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring IPv4 ACLs
Extended IP ACL with the any Keyword
To use an abbreviation for a source and source wildcard of 0.0.0.0 255.255.255.255 and an abbreviation for
a destination and destination wildcard of 0.0.0.0 255.255.255.255 when defining an extended IP ACL, use
the any keyword in place of source and destination address and wildcard:
Switch# configure terminal
Switch(config)# access-list 101 permit ip any any precedence 0 tos 0 fragments
log time-range workhours dscp 10
Switch(config)# end
Extended IP ACL with the host Keyword
To use an abbreviation for a source and a source wildcard of source 0.0.0.0 and an abbreviation for a destination
and destination wildcard of destination 0.0.0.0 when defining an extended IP ACL, use the host keyword in
place of the source and destination wildcard or mask.
Switch# configure terminal
Switch(config)# access-list 101 permit ip host 10.1.1.2 any
Switch(config)# end
Related Topics
Configuring VLAN Maps, on page 135

Creating Named Standard ACLs

Beginning in privileged EXEC mode, follow these steps to create a standard ACL using names:
SUMMARY STEPS
1. configure terminal
2. ip access-list standard name
3. Use one of the following:
4. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
OL-29434-01
• deny {source [source-wildcard] | host source | any} [log]
• permit {source [source-wildcard] | host source | any} [log]]
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Creating Named Standard ACLs
Purpose
Enters the global configuration mode.
125