UMN:CLI
User Manual
V5824G
206
To delete an existing standard IP address-based access list entry, use the following
command.
Command
Mode
Description
no access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
A.B.C.D
[
WILDCARD-BITS
]
Global
Deletes an entry of the standard ACL.
no access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
any
no access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
host
A.B.C.D
no access-list
{<1-99> | <1300-
1999>}
remark
LINE
Sample Configuration
This is an example of creating the standard ACL entries.
SWITCH(config)#
access-list
5
permit
10.55.10.2 0.0.0.255
SWITCH(config)#
access-list
5
deny
10.55.1.1 0.0.0.255
SWITCH(config)#
7.18.2
Extended Access List
To create an extended IP address-based access list entry, use the following command.
Command
Mode
Description
access-list
{<100-199> | <2000-
2699>} {
deny
|
permit
}
ip
A.B.C.D
WILDCARD-BITS
A.B.C.D
WILDCARD-BITS
Global
Specifies a deny or permit statement of the extended
ACL with source/destination addresses and their wild
masks.
100-199: IP extended access list
2000-2699: IP extended access list (extended range)
deny: denies packet if conditions are matched.
permit: permits packet if conditions are matched.
ip: any Internet Protocol
A.B.C.D: source/destination IP address to match
WILDCARD-BITS: bits for use of source/destination IP
address wildcard masking
access-list
{<100-199> | <2000-
2699>} {
deny
|
permit
}
ip
host
A.B.C.D
A.B.C.D
WILDCARD-
BITS
Specifies a deny or permit statement of the extended
ACL with a single source host and other variables.
host: single source host
A.B.C.D: source/destination IP address of a host to
match
WILDCARD-BITS: bits for use of host destination IP
address wildcard masking