Configuraton of standard access list and extented access lis
•Download as PPT, PDF•
0 likes•433 views
This document discusses IP standard and extended access lists. IP standard access lists use numbers 1-99 to filter based on source IP addresses. Extended IP access lists use numbers 100-199 to filter on source/destination IP addresses, protocol, and port numbers. Access lists are applied to interfaces to filter inbound or outbound traffic.
![IP Standard Access Configuration ,[object Object],[object Object],[access-list] [ access-list-number ] { permit | deny } [source] [ source-mask ] Router(config)#](https://image.slidesharecdn.com/configuratonofstandardaccesslistandextentedaccesslis-100917005947-phpapp01/85/Configuraton-of-standard-access-list-and-extented-access-lis-1-320.jpg)
![[object Object],IP Standard Access Configuration ,[object Object],[object Object],[access-list] [access-list-number] { permit | deny } [source] [source-mask] Router(config)# Router(config-if)# [ip access-group] [access-list-number] { in | out }](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
More Related Content
What's hot
What's hot (19)
Similar to Configuraton of standard access list and extented access lis
Similar to Configuraton of standard access list and extented access lis (20)
More from Asif
More from Asif (14)
Editor's Notes
- access-list command creates an entry in a standard traffic filter list. access-list field descriptions: list—identifies the list to which the entry belongs; a number from 1 to 99. address—source IP address. wildcard-mask—identifies which bits in the address field are matched. It has a 1 in positions indicating “don't care” bits, and a 0 in any position which is to be strictly followed. ip access-group command links an existing access list to an outgoing interface. Only one access list per port per protocol is allowed. ip access-group field descriptions: list—number of the access-list to be linked to this interface.
- access-list command creates an entry in a standard traffic filter list. access-list field descriptions: list—identifies the list to which the entry belongs; a number from 1 to 99. address—source IP address. wildcard-mask—identifies which bits in the address field are matched. It has a 1 in positions indicating “don't care” bits, and a 0 in any position which is to be strictly followed. ip access-group command links an existing access list to an outgoing interface. Only one access list per port per protocol is allowed. ip access-group field descriptions: list—number of the access-list to be linked to this interface.
- access-list command creates an entry in complex traffic filter list. access-list field descriptions: list—a number between 100 and 199 protocol—ip, tcp, udp, icmp source—ip address source-mask—wildcard-mask of address bits that must match. 0s indicate bits that must match, 1s are "don't care". destination—ip address destination-mask—wildcard-mask operator—lt, gt, eq, neq operand—a port number
- access-list command creates an entry in complex traffic filter list. access-list field descriptions: list—a number between 100 and 199 protocol—ip, tcp, udp, icmp source—ip address source-mask—wildcard-mask of address bits that must match. 0s indicate bits that must match, 1s are "don't care". destination—ip address destination-mask—wildcard-mask operator—lt, gt, eq, neq operand—a port number