Table of Contents
Advertisement
IP P r o t oco l
Reservation Protocol
General Routing Encapsulation
Encapsulating Security Payload (50)
Authentication Header
ICMP for IPv6
EIGRP routing protocol
Open Shortest Path Protocol
IP-within-IP Encapsulation Protocol
Protocol Independent Multicast
Layer Two Tunneling Protocol
ISIS over IPv4
(any IP protocol)
•
in-port port-num — (Optional) Specifies the input port of the devise. In case of egress classification this port
will be devise input port.
•
out-port port-num — (Optional) Specifies the output port of the devise.
•
dscp — Indicates matching the dscp number with the packet dscp value.
•
ip-precedence — Indicates matching ip-precedence with the packet ip-precedence value.
Default Configuration
This command has no default configuration
Command Mode
IP-Access List Configuration mode
User Guidelines
Use the ip access-list Global Configuration mode command to enable the IP-Access List Configuration mode.
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE is added, an
implied deny-any-any condition exists at the end of the list and those packets that do not match the defined
conditions are denied.
Example
The following example shows how to define a permit statement for an IP ACL.
Console(config)# ip access-list ip-acl1
Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any
A bb r ev ia t ed N am e
rsvp
gre
esp
ah
ipv6-icmp
eigrp
ospf
ipip
pim
l2tp
isis
any
Page 40
ACL Commands
P r o to co l N u m be r
46
47
50
51
58
88
89
94
103
115
124
(25504)
Advertisement
Table of Contents
