CISCO IOS in a Nutshell

Name

access-list — global

Synopsis

Standard:

access-list number {permit | deny} src-address-spec

Extended:

access-list number {permit | deny} protocol 
               src-address-spec [operator port]
    dest-address-spec [operator 
               port] [established] [precedence value] 
    [tos value] [log]

Named:

ip access-list {standard | extended} name

All access list types:

no access-list number

Configures

An access list

Default

None

Description

Access lists are an extremely general method for controlling access to the router, the traffic flowing in and out of the router, and even the routes accepted by the router. This command defines an entry in an access list.

number

A number that identifies the list and list type. Table 15-1 shows the ranges assigned to each list type. This book covers only standard and extended IP access lists, plus named and reflexive access lists.

Table 15-1. Access list numbers

List type	Numeric range
Standard IP access lists	1-99
Extended IP access lists	100-199
Ethernet type code	200-299
DECnet	300-399
XNS	400-499
Extended XNS	500-599
AppleTalk	600-699
Ethernet address	700-799
Novell	800-899
Extended Novell	900-999
Novell SAP	1000-1099
Additional standard IP access lists	1300-1999
Additional extended IP access lists	2000-2699
Named access lists	None
Reflexive access lists	None

permit|deny

Specifies if the line is to permit or deny matched traffic.

protocol

Specifies the protocol to which the access list entry applies. For IP access lists, this option can be ip, tcp,