UMN:CLI
User Manual
V8102
238
10.55.10.2
0.0.0.255
10.55.10.1
– 10.55.10.255
10.55.10.2
0.0.0.0
10.55.10.2
Tab. 7.5
Examples of Wildcard Masking
If you put 10.55.10.2 and 0.0.0.255 for an IP address and wildcard mask to permit, all
traffic that begins with 10.55.10.1 to 10.55.10.255 (10.55.10.0/24) are accepted. If you set
any IP address with wildcard bits 0.0.0.0, it indicates the IP address itself that should be
processed.
7.18.1
Standard Access List
To create a standard IP address-based access list entry, use the following command.
Command
Mode
Description
access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
A.B.C.D
[
WILDCARD-BITS
]
Global
Specifies a deny or permit statement of the standard
ACL with IP addresses and wildcard bits
1-99: IP standard access list
1300-1999: IP standard access list (extended range)
deny: denies packets if conditions are matched.
permit: permits packets if conditions are matched.
A.B.C.D: IP address to match
WILDCARD-BITS: bits for use of wildcard masking
access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
any
Specifies a deny or permit statement of the standard
ACL with any source host.
any: any source host
access-list
{<1-99> | <1300-
1999>} {
deny
|
permit
}
host
A.B.C.D
Specifies a deny or permit statement of the standard
ACL with a specific host.
A.B.C.D: host address to match
access-list
{<1-99> | <1300-
1999>}
remark
LINE
Adds comments for the standard ACL.
LINE: access list entry comments up to 100 characters
Add entries to the list by repeating the command for different IP addresses.
To delete an existing standard IP address-based access list entry, use the following com-
mand.
Command
Mode
Description
no access-list
{<1-99> | <1300-1999>} {
deny
|
permit
}
A.B.C.D
[
WILDCARD-BITS
]
Global
Deletes an entry of the standard ACL.
no access-list
{<1-99> | <1300-1999>} {
deny
|
permit
}
any
no access-list
{<1-99> | <1300-1999>} {
deny
|
permit
}
host A.B.C.D
no access-list
{<1-99> | <1300-1999>}
remark
LINE
i
