Command or Action
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
ip access-list standard name
Example:
Switch(config)# ip access-list standard 20
Step 4
Use one of the following:
• deny {source [source-wildcard] | host source | any}
[log]
• permit {source [source-wildcard] | host source |
any} [log]
Example:
Switch(config-std-nacl)# deny 192.168.0.0
0.0.255.255 255.255.0.0 0.0.255.255
or
Switch(config-std-nacl)# permit 10.108.0.0
0.0.0.0 255.255.255.0 0.0.0.0
Step 5
end
Example:
Switch(config-std-nacl)# end
Step 6
show running-config
Example:
Switch# show running-config
Step 7
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
Purpose
Enters the global configuration mode.
Defines a standard IPv4 access list using a name, and enter
access-list configuration mode.
The name can be a number from 1 to 99.
In access-list configuration mode, specify one or more
conditions denied or permitted to decide if the packet is
forwarded or dropped.
• host source—A source and source wildcard of
source 0.0.0.0.
• any—A source and source wildcard of 0.0.0.0
255.255.255.255.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
How to Configure ACLs
1189