ADTRAN AOS Version R10.1.0 Command Reference Manual page 982

Command Reference Guide
ip access-list extended <ipv4 acl name>
Use the ip access-list extended command to create an empty Internet Protocol version 4 (IPv4) access
control list (ACL) and enter the Extended ACL Configuration mode. Use the no form of this command to
delete an extended ACL and all the entries contained in it.
For a complete list of all extended IPv4 ACL configuration commands, refer to the
Access Control List Command Set on page
Syntax Description
<ipv4 acl name>
Default Values
By default, all AOS security features are disabled, and there are no configured IPv4 ACLs.
Command History
Release 2.1
Functional Notes
This command only creates an empty extended IPv4 ACL, it does not configure it. For additional extended
ACL configuration commands and configuration parameters, refer to the
Command Set on page
Usage Examples
The following example creates an extended IPv4 ACL AllowIKE and enters the Extended ACL
Configuration mode:
(config)#ip access-list extended AllowIKE
(config-ext-nacl)#
Technology Review
IPv4 ACLs are used as packet selectors by different AOS IPv4 features (firewall, virtual private network
(VPN), quality of service (QoS)); by themselves they do nothing. ACLs are composed of an ordered list of
entries with an implicit deny all at the end of each list. An ACL entry contains two parts: an action (permit
or deny) and a packet pattern. A permit ACL is used to match packets (meeting the specified pattern) to
enter the router system. A deny ACL advances AOS to the next access policy entry. AOS provides two
types of ACLs: standard and extended. Standard ACLs match based on the source of the packet.
Extended ACLs match based on the source and destination of the packet.
ACLs are performed in order from the top of the list down. Generally, the most specific entries should be at
the top and the more general at the bottom.
60000CRG0-35E
Specifies the name of the IPv4 ACL.
Command was introduced.
3126.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
3126.
IPv4 Access Control List
IPv4
982