IOS IPv4 Access Lists
packetlife.net
by Jeremy Stretch v2.0
IOS IPV4 ACCESS LISTS
Standard ACL Syntax
permit
Actions
deny
remark
evaluate
Allow matched packets
Deny matched packets
Record a configuration comment
Evaluate a reflexive ACL
Extended ACL Syntax
! Legacy syntax
a...
packetlife.net
by Jeremy Stretch v2.0
IOS IPV4 ACCESS LISTS
Standard ACL Syntax
permit
Actions
deny
remark
evaluate
Allow matched packets
Deny matched packets
Record a configuration comment
Evaluate a reflexive ACL
Extended ACL Syntax
! Legacy syntax
access-list {permit | deny} [log]
! Modern syntax
ip access-list standard { | }
[] {permit | deny} [log]
ACL Numbers
TCP Options
1-99
1300-1999
IP standard
100-199
2000-2699
IP extended
200-299 Protocol
300-399 DECnet
400-499 XNS
ack Match ACK flag
fin Match FIN flag
psh Match PSH flag
rst Match RST flag
syn Match SYN flag
Troubleshooting
show access-lists [ | ]
show ip access-lists [ | ]
show ip access-lists interface
show ip access-lists dynamic
show ip interface []
show time-range []
! Legacy syntax
access-list {permit | deny} [] [] []
! Modern syntax
ip access-list extended { | }
[] {permit | deny} [] [] []
500-599 Extended XNS
600-699 Appletalk
700-799 Ethernet MAC
800-899 IPX standard
900-999 IPX extended
1000-1099 IPX SAP
1100-1199 MAC extended
1200-1299 IPX summary
urg
established
Match URG flag
Source/Destination Definitions
any Any address
host A single address
Any address matched by the wildcard mask
IP Options
dscp Match the specified IP DSCP
fragments Check non-initial fragments
option
举报
浙公网安备 33021202002483