ADTRAN AOS Version R10.1.0 Command Reference Manual page 984

Command Reference Guide
ip access-list standard <ipv4 acl name>
Use the ip access-list standard command to create an empty IPv4 access control list (ACL) and enter the
Standard ACL Configuration mode. Use the no form of this command to delete an extended ACL and all
the entries contained in it.
For a complete list of all standard IPv4 ACL configuration commands, refer to the
Access Control List Command Set on page
Syntax Description
<ipv4 acl name>
Default Values
By default, all AOS security features are disabled, and there are no configured IPv4 ACLs.
Command History
Release 2.1
Functional Notes
This command only creates an empty standard IPv4 ACL, it does not configure it. For additional standard
IPv4 ACL configuration commands and configuration parameters, refer to the
Command Set on page
Usage Examples
The following example creates a standard IPv4 ACL AllowIKE and enters the Standard ACL Configuration
mode:
(config)#ip access-list standard AllowIKE
(config-std-nacl)#
Technology Review
IPv4 ACLs are used as packet selectors by different IPv4 AOS features (firewall, virtual private network
(VPN), quality of service (QoS)); by themselves they do nothing. ACLs are composed of an ordered list of
entries with an implicit deny all at the end of each list. An ACL entry contains two parts: an action (permit
or deny) and a packet pattern. A permit ACL is used to match packets (meeting the specified pattern) to
enter the router system. A deny ACL advances AOS to the next access policy entry. AOS provides two
types of ACLs: standard and extended. Standard ACLs match based on the source of the packet.
Extended ACLs match based on the source and destination of the packet.
ACLs are performed in order from the top of the list down. Generally, the most specific entries should be at
the top and the more general at the bottom.
60000CRG0-35E
Specifies the name of the IPv4 ACL.
Command was introduced.
3126.
Copyright © 2012 ADTRAN, Inc.
Global Configuration Mode Command Set
3126.
IPv4 Access Control List
IPv4
984