![](http://pdfasset.owneriq.net/6/90/69029205-8bce-4051-bf2a-3f7a074bd3a4/69029205-8bce-4051-bf2a-3f7a074bd3a4-bg81.png)
A
CCESS
C
ONTROL
L
ISTS
3-75
select “IP,” enter a subnet address and the mask for an address range. Then
click Add.
CLI – This example configures one permit rule for the specific address
10.1.1.21 and another rule for the address range 168.92.16.x – 168.92.31.x
using a bitmask.
Configuring an Extended IP ACL
Command Attributes
• Action – An ACL can contain either all permit rules or all deny rules.
(Default: Permit rules)
• Src/Dst IP – Specifies the source or destination IP address. Use
“Any” to include all possible addresses, “Host” to specify a specific
host address in the Address field, or “IP” to specify a range of
addresses with the Address and SubMask fields. (Options: Any, Host,
IP; Default: Any)
• Src/Dst Address – Source or destination IP address.
• Src/Dst SubMask – Subnet mask for source or destination address.
Console(config-std-acl)#permit host 10.1.1.213-117
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#