Filter
Top Products
Using Access Control Lists (ACLs)
• pop2
• pop3
• smtp
• ssl
• telnet
• UDP port names recognized by the software:
• bootps
• bootpc
• dns
• ntp
• radius
• radius-old
• rip
• snmp
• snmp-trap
• tftp
The in | out parameter specifies whether the ACL applies to incoming traffic or outgoing traffic on the interface to
which you apply the ACL. You can apply the ACL to an Ethernet port or virtual interface.
NOTE: If the ACL is for the inbound traffic direction on a virtual routing interface, you also can specify a subset of
ports within the VLAN containing that interface when assigning an ACL to the interface. See “Configuring Named
ACLs” on page 3-18.
The precedence <name> | <num> parameter of the ip access-list command specifies the IP precedence. The
precedence option for of an IP packet is set in a three-bit field following the four-bit header-length field of the
packet’s header. You can specify one of the following:
• critical or 5 – The ACL matches packets that have the critical precedence. If you specify the option number
instead of the name, specify number 5.
• flash or 3 – The ACL matches packets that have the flash precedence. If you specify the option number
instead of the name, specify number 3.
• flash-override or 4 – The ACL matches packets that have the flash override precedence. If you specify the
option number instead of the name, specify number 4.
• immediate or 2 – The ACL matches packets that have the immediate precedence. If you specify the option
number instead of the name, specify number 2.
• internet or 6 – The ACL matches packets that have the internetwork control precedence. If you specify the
option number instead of the name, specify number 6.
• network or 7 – The ACL matches packets that have the network control precedence. If you specify the option
number instead of the name, specify number 7.
• priority or 1 – The ACL matches packets that have the priority precedence. If you specify the option number
instead of the name, specify number 1.
• routine or 0 – The ACL matches packets that have the routine precedence. If you specify the option number
instead of the name, specify number 0.
The tos <name> | <num> parameter of the ip access-list command specifies the IP TOS.
3 - 13