Cisco Catalyst 2960-XR User Manual

SUMMARY STEPS
1.
configure terminal
2.
access-list access-list-number {deny | permit} source source-wildcard [log]
3.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Defines a standard IPv4 access list by using a source address and wildcard.
access-list access-list-number {deny
| permit} source source-wildcard
[log]
Step 2
The access-list-number is a decimal number from 1 to 99 or 1300 to 1999.
Enter deny or permit to specify whether to deny or permit access if conditions are
matched.
Example:
Switch(config)# access-list 2
The source is the source address of the network or host from which the packet is
being sent specified as:
deny your_host
•
The 32-bit quantity in dotted-decimal format.
•
The keyword any as an abbreviation for source and source-wildcard of 0.0.0.0
255.255.255.255. You do not need to enter a source-wildcard.
•
The keyword host as an abbreviation for source and source-wildcard of source
0.0.0.0.
(Optional) The source-wildcard applies wildcard bits to the source.
(Optional) Enter log to cause an informational logging message about the packet
that matches the entry to be sent to the console.
(Optional) Enter smartlog to send copies of denied or permitted packets to a
NetFlow collector.
Logging is supported only on ACLs attached to Layer 3 interfaces.Note
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 3
Related Topics
Configuring VLAN Maps, on page 135
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 121
Configuring IPv4 ACLs
Creating a Numbered Standard ACL

Cisco Catalyst 2960-XR Specifications

General

Brand	Cisco
Model	Catalyst 2960-XR
Category	Switch
Language	English