Standard IP Access List Configuration

A standard access list is used to match a packet and then take the directed action. Each standard ACL can match all, or only part, of the packet's source IP address. The only two actions taken when an access-list statement is matched are to either deny or permit the packet.

The configuration commands required are:
• ip access-group {number | action [in | out]}, in which action can be either permit of deny and is used to enable access lists; and
• access-class number | action [in | out], which can be used to enable either standard or extended access lists.

The standard access list configuration can be verified using the following show commands:
• show ip interface[type number], which includes a reference to the access lists enabled on the interface;
• show access-lists [access-list-number | access-list-name], which shows details of configured access lists for all protocols; and
• show ip access-list [access-list-number | access-list-name], which shows the access lists.

Bookmark this page | Make this your Homepage