A
CCESS
C
ONTROL
L
ISTS
3-71
Web – Specify the action (i.e., Permit or Deny). Select the address type
(Any, Host, or IP). If you select “Host,” enter a specific address. If you
select “IP,” enter a subnet address and the mask for an address range. Then
click Add.
Figure 3-34. Configuring Standard IP ACLs
CLI – This example configures one permit rule for the specific address
10.1.1.21 and another rule for the address range 168.92.16.x – 168.92.31.x
using a bitmask.
Configuring an Extended IP ACL
Command Attributes
• Action – An ACL can contain either all permit rules or all deny rules.
(Default: Permit rules)
• Src/Dst IP – Specifies the source or destination IP address. Use
“Any” to include all possible addresses, “Host” to specify a specific
host address in the Address field, or “IP” to specify a range of
addresses with the Address and SubMask fields. (Options: Any, Host,
IP; Default: Any)
Console(config-std-acl)#permit host 10.1.1.21 4-115
Console(config-std-acl)#permit 168.92.16.0 255.255.240.0
Console(config-std-acl)#