Creating Named Standard And Extended Acls; Using Time Ranges With Acls - Cisco IE-4000 Software Configuration Manual

Configuring Network Security with ACLs
How to Configure Network Security with ACLs

Creating Named Standard and Extended ACLs

Command
1. configure terminal
2. ip access-list standard name
or
ip access-list extended name
3. {deny | permit} {source [source-wildcard] |
host source | any} [log]
or
{deny | permit} protocol {source
[source-wildcard] | host source | any}
{destination [destination-wildcard] | host
destination | any} [precedence precedence]
[tos tos] [established] [log] [time-range
time-range-name]
4. end

Using Time Ranges with ACLs

Repeat the steps if you have multiple items that you want in effect at different times.
Purpose
Enters global configuration mode.
Defines a standard IPv4 access list using a name, and enters
access-list configuration mode.
The name can be a number from 1 to 99.
or
Defines an extended IPv4 access list using a name, and enters
access-list configuration mode.
The name can be a number from 100 to 199.
In access-list configuration mode, specifies one or more
conditions denied or permitted to decide if the packet is forwarded
or dropped.

host source—A source and source wildcard of source 0.0.0.0.

any—A source and source wildcard of 0.0.0.0
255.255.255.255.
or
In access-list configuration mode, specify the conditions allowed
or denied. Use the log keyword to get access list logging
messages, including violations.
See Creating a Numbered Extended ACL, page 555
of protocols and other keywords.

host source—A source and source wildcard of source 0.0.0.0.

host destination—A destination and destination wildcard of
destination 0.0.0.0.

any—A source and source wildcard or destination and
destination wildcard of 0.0.0.0 255.255.255.255.
Returns to privileged EXEC mode.
559
for definitions