Access Control List Commands4-1034IP ACLsaccess-list ipThis command adds an IP access list and enters configuration mode for standard orextended IP ACLs. Use the no form to remove the specified ACL.Syntax[no] access-list ip {standard | extended} acl_name• standard – Specifies an ACL that filters packets based on the source IPaddress.• extended – Specifies an ACL that filters packets based on the source ordestination IP address, and other more specific criteria.• acl_name – Name of the ACL. (Maximum length: 16 characters)Default SettingNoneCommand ModeGlobal ConfigurationTable 4-34 Access Control ListsCommand Groups Function PageIP ACLs Configures ACLs based on IP addresses, TCP/UDP port number,protocol type, and TCP control code4-103MAC ACLs Configures ACLs based on hardware addresses, packet format, andEthernet type4-110ACL Information Displays ACLs and associated rules; shows ACLs assigned to each port 4-115Table 4-35 IP ACLsCommand Function Mode Pageaccess-list ip Creates an IP ACL and enters configuration mode GC 4-103permit, deny Filters packets matching a specified source IP address STD-ACL 4-104permit, deny Filters packets meeting the specified criteria, includingsource and destination IP address, TCP/UDP port number,protocol type, and TCP control codeEXT-ACL 4-105show ip access-list Displays the rules for configured IP ACLs PE 4-107ip access-group Adds a port to an IP ACL IC 4-107show ip access-group Shows port assignments for IP ACLs PE 4-107map access-list ip Sets the CoS value and corresponding output queue forpackets matching an ACL ruleIC 4-108show map access-list ip Shows CoS value mapped to an access list for an interface PE 4-109
