Cisco NM-8B-U - HW ROUTERS L-M User Manual page 83

16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series
Use the no access-list access-list-number global configuration command to delete the entire access list.
You cannot delete individual ACEs from numbered access lists.
After an ACL is created, any additions (possibly entered from the terminal) are placed at the end of the
list. You can add ACEs to an ACL, but deleting any ACE deletes the entire ACL.
Note When creating an ACL, remember that, by default, the end of the access list contains an implicit deny
statement for all packets if it did not find a match before reaching the end.
After creating an ACL, you must apply it to an interface, as described in the
Interface" section on page
Creating Named Standard and Extended ACLs
You can identify IP ACLs with an alphanumeric string (a name) rather than a number. You can use named
ACLs to configure more IP access lists on a switch than if you use numbered access lists. If you identify
your access list with a name rather than a number, the mode and command syntax are slightly different.
However, not all commands that use IP access lists accept a named ACL.
The name you give to a standard ACL or extended ACL can also be a number in the supported range
Note
of access list numbers. That is, the name of a standard IP ACL can be 1 to 99; the name of an extended
IP ACL can be 100 to 199. The advantage of using named ACLs instead of numbered lists is that you
can delete individual entries from a named list.
Consider these guidelines and limitations before configuring named ACLs:
•
•
85.
A standard ACL and an extended ACL cannot have the same name.
Numbered ACLs are also available, as described in the
section on page 78.
"Creating Standard and Extended IP ACLs"
Cisco IOS Release 12.2(2)XT, 12.2(8)T, and 12.2(15)ZJ
Configuration Tasks
"Applying the ACL to an
83