Ipv4 Access Control List Command Set - ADTRAN AOS Version R10.1.0 Command Reference Manual

Command Reference Guide
IP 4 A
V CCESS
An Internet Protocol version 4 (IPv4) access control list (ACL) is an ordered list of entries used as packet
selectors by an IPv4 access control policy (ACP) in the ADTRAN Operating System (AOS) command line
interface (CLI). ACLs and ACPs work together to regulate IPv4 traffic through the routed network.
There are two types of IPv4 ACLs within AOS: standard and extended. A standard IPv4 ACL allows
source IPv4 address packet patterns only. An extended IPv4 ACL may specify patterns using most fields
in the IPv4 header and the Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) header.
This configuration command set details the configuration of both a standard and an extended IPv4 ACL.
IPv6 ACLs are also supported by AOS, but are explained separately in this document.
Refer to
configuring IPv6 ACLs.
To create a standard IPv4 ACL and activate the Standard IPv4 ACL Configuration mode, enter the ip
access-list standard <name> command at the Global Configuration mode prompt. For example:
>enable
#configure terminal
(config)#ip access-list standard MATCHALL
(config-std-nacl)#
To create an extended IPv4 ACL and activate the Extended IPv4 ACL Configuration Mode, enter the ip
access-list extended <name> command at the Global Configuration mode prompt. For example:
>enable
#configure terminal
(config)#ip access-list extended MATCHALL
(config-ext-nacl)#
An IPv4 ACL will remain inactive until it is assigned to an active IPv4 ACP. For more
information on configuring and activating IPv4 ACPs, refer to the
Policy Command Set on page
Technology Review
IPv4 ACPs and IPv4 ACLs regulate traffic through the routed network. When designing your traffic flow
configuration, it is important to keep the following in mind:
• An IPv4 ACL serves as a packet selector, defining exactly which packets should take the given action.
• An IPv4 ACP defines the action to take on the packets selected by the ACL.
• An IPv4 ACL is inactive until it is assigned to an active ACP.
• An IPv4 ACP is inactive until it is assigned to an interface.
60000CRG0-35E
C L
ONTROL IST
IPv6 Access Control List Command Set on page 3162
3144.
Copyright © 2012 ADTRAN, Inc.

IPv4 Access Control List Command Set

C S
OMMAND ET
for more information on
IPv4 Access Control
3126