CCSP Self-Study: Securing Cisco IOS Networks (SECUR)

Configuring Standard IP Access Lists

This section covers how to configure standard IP access lists. Standard IP access lists permit or deny packets based only on the packet's source IP address. The access list number range for defining standard IP access lists is 1 to 99. Standard IP access lists are easier to configure than extended IP access lists, yet they are less powerful because they cannot be used to filter on traffic types or destination addresses. Figure C-3 shows that a standard IP access list could be used to deny access to a network based on the source address.

Figure C-3. Standard IP Access Lists Permit or Deny Packets Based on the Packet's Source IP Address—The Access List Here Denies Access to a Network

CAUTION

Cisco IOS Software ...