RouterX(config)# ip access-list standard name
De?¬?ne the list using a unique name. A descriptive name can be helpful
when examining the con?¬?guration of the router.
Step 2 Enter one of the following commands to establish test parameters:
RouterX(config-std-nacl)#[ sequence-number] ddeennyy { source [ source-wildcard]
| aannyy}
RouterX(config-std-nacl)#[ sequence-number] permit { source [ sourcewildcard]
| any}
In access list con?¬?guration mode, specify one or more conditions permitted
or denied. This determines whether the packet is passed or dropped. You
can also use the sequence number to place the test parameter in a speci?¬?c
location within the list.
Step 3 Exit from named access list con?¬?guration mode:
RouterX(config-std-nacl)#eexxiitt
RouterX(config)#
Step 4 Select a desired interface to be con?¬?gured. Use the interface global
con?¬?guration command:
RouterX(config)# interface ethernet 0
After you enter the interface command, the CLI prompt changes from
(con?¬?g)# to (con?¬?g-if)#.
Step 5 Link the extended IPv4 ACL to an interface. Use the ip access-group
interface con?¬?guration command:
RouterX(config-if)# ip access-group 101 in
Use the show ip interface command to verify that an IP ACL is applied to
the interface.
Pages:
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357