Cisco ASR 9000 Getting Started Manual page 115

Chapter CLI Tips, Techniques, and Shortcuts
The following example shows how to add an entry to access list 99. The added entry denies access to all
hosts on subnet 172.0.0.0 and ignores bits for IPv4 addresses that start within the range of 0 to 255. The
following steps provide an example of on-screen command help:
Enter the access-list command, followed by a space and a question mark, to list the available options for
Step 1
the command:
RP/0//CPU0:router(config)# ipv4 access-list ?
log-update
ssm-acl
bidir-acl
WORD
The number ranges (within the angle brackets) are inclusive ranges.
Note
Enter the access list name list1, followed by a space and another question mark, to display the arguments
Step 2
that apply to the keyword and brief explanations:
RP/0//CPU0:router(config)# ipv4 access-list list1 ?
log-update
ssm-acl
bidir-acl
WORD
RP/0/RP0/CPU0:router(config)#ipv4 access-list list1 ?
<1-2147483646>
deny
permit
remark
<cr>
RP/0//CPU0:router(config)#ipv4 access-list list1
Enter the deny option and a question mark to see more command options:
Step 3
RP/0//CPU0:router(config)#ipv4 access-list list1 deny ?
<0-255>
A.B.C.D
A.B.C.D/prefix
ahp
any
eigrp
esp
gre
host
icmp
igmp
igrp
ipinip
ipv4
nos
ospf
pcp
pim
sctp
tcp
udp
RP/0//CPU0:router(config)#ipv4 access-list list1 deny
Enter an IP address, followed by a space and a question mark (?), to list additional options:
Step 4
OL-28417-02
Control access lists log updates
Access list name - maximum 32 characters
Access list name - maximum 32 characters
Access list name - maximum 32 characters
Control access lists log updates
Access list name - maximum 32 characters
Access list name - maximum 32 characters
Access list name - maximum 32 characters
Sequence number for this entry
Specifies packets to reject
Specifies packets to forward
Comment for access list
An IPv4 Protocol Number
Source IP address or prefix
Source IP address and care bits
Authentication Header Protocol
Any source host
Cisco's EIGRP Routing Protocol
Encapsulation Security Payload
Cisco's GRE Tunneling
A single source host
Internet Control Message Protocol
Internet Gateway Message Protocol
Cisco's IGRP Routing Protocol
IP in IP tunneling
Any IPv4 Protocol
KA9Q NOS Compatible IP over IP Tunneling
OSPF Routing Protocol
Payload Compression Protocol
Protocol Independent Multicast
Stream Control Transmission Protocol
Transport Control Protocol
User Datagram Protocol
Cisco ASR 9000 Series Aggregation Services Router Getting Started Guide
CLI Tips and Shortcuts
111