Creating Standard And Extended Ipv4 Acls; Access List Numbers - Cisco WS-CBS3032-DEL Software Configuration Manual

Configuring IPv4 ACLs
These sections contain this configuration information:
•
•
•
•
•
•

Creating Standard and Extended IPv4 ACLs

This section describes IP ACLs. An ACL is a sequential collection of permit and deny conditions. One
by one, the switch tests packets against the conditions in an access list. The first match determines
whether the switch accepts or rejects the packet. Because the switch stops testing after the first match,
the order of the conditions is critical. If no conditions match, the switch denies the packet.
The software supports these types of ACLs or access lists for IPv4:
•
•
These sections describe access lists and how to create them:
•
•
•
•
•
•
•
•

Access List Numbers

The number you use to denote your ACL shows the type of access list that you are creating.
lists the access-list number and corresponding access list type and shows whether or not they are
supported in the switch. The switch supports IPv4 standard and extended access lists, numbers 1 to 199
and 1300 to 2699.
Table 35-1
Access List Number
1–99
100–199
200–299
300–399
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
35-8
Creating Standard and Extended IPv4 ACLs, page 35-8
Applying an IPv4 ACL to a Terminal Line, page 35-19
Applying an IPv4 ACL to an Interface, page 35-20
Hardware and Software Treatment of IP ACLs, page 35-22
Troubleshooting ACLs, page 35-22
IPv4 ACL Configuration Examples, page 35-23
Standard IP access lists use source addresses for matching operations.
Extended IP access lists use source and destination addresses for matching operations and optional
protocol-type information for finer granularity of control.
Access List Numbers, page 35-8
ACL Logging, page 35-9
Creating a Numbered Standard ACL, page 35-10
Creating a Numbered Extended ACL, page 35-11
Resequencing ACEs in an ACL, page 35-15
Creating Named Standard and Extended ACLs, page 35-15
Using Time Ranges with ACLs, page 35-17
Including Comments in ACLs, page 35-19
Access List Numbers
Type
IP standard access list
IP extended access list
Protocol type-code access list
DECnet access list
Chapter 35 Configuring Network Security with ACLs
Supported
Yes
Yes
No
No
Table 35-1
OL-13270-06