Cisco ASA Series Cli Configuration Manual page 581

Chapter 1 Adding a Standard Access Control List
Adding Standard Access Lists
This section includes the following topics:
•
•
•
Task Flow for Configuring Extended Access Lists
Use the following guidelines to create and implement an access list:
•
•
Adding a Standard Access List
To add an access list to identify the destination IP addresses of OSPF routes, which can be used in a route
map for OSPF redistribution, enter the following command:
Command
hostname(config)# access-list
access_list_name standard {deny | permit}
{any | ip_address mask}
Example:
hostname(config)# access-list OSPF
standard permit 192.168.1.0 255.255.255.0
Task Flow for Configuring Extended Access Lists, page 1-3
Adding a Standard Access List, page 1-3
Adding Remarks to Access Lists, page 1-4
Create an access list by adding an ACE and applying an access list name. See in the
Standard Access Lists" section on page
Apply the access list to an interface. See the
more information.
Purpose
Adds a standard access list entry. To add another ACE to the end of the
access list, enter another access-list command, specifying the same access
list name.
The access_list_name argument specifies the name of number of an access
list.
The any keyword specifies access to anyone.
The deny keyword denies access if the conditions are matched.
The host ip_address syntax specifies access to a host IP address.
The ip_address ip_mask argument specifies access to a specific IP address
and subnet mask.
The line line-num option specifies the line number at which to insert an
ACE.
The permit keyword permits access if the conditions are matched.
To remove an ACE, enter the no access-list command with the entire
command syntax string as it appears in the configuration.
1-3.
"Configuring Access Rules" section on page 1-7
Cisco ASA Series CLI Configuration Guide
Adding Standard Access Lists
"Adding
for
1-3