Configuring Standard IP Access Lists

This section covers how to configure standard IP access lists. Standard IP access lists permit or deny packets based only on the packet's source IP address. The access list number range for defining standard IP access lists is 1 to 99. Standard IP access lists are easier to configure than extended IP access lists, yet they are less powerful because they cannot be used to filter on traffic types or destination addresses. Figure C-3 shows that a standard IP access list could be used to deny access to a network based on the source address.

Figure C-3. Standard IP Access Lists Permit or Deny Packets Based on the Packet's Source IP Address—The Access List Here Denies Access to a Network


Cisco IOS Software ...

Get CCSP Self-Study: Securing Cisco IOS Networks (SECUR) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.