Access-list

access-list (IP standard)

access-list <access-list-number> {deny | permit} <source> [<source-wildcard>] [log]

Example:

conf t
access-list 1 deny 127.0.0.0 0.255.255.255 log
access-list 1 permit any

access-list (IP extended)

access-list <access-list-number> [dynamic <dynamic-name> [timeout <minutes>]] {deny | permit} <protocol> <source> <source-wildcard> <destination> <destination-wildcard> [log | log-input]]

Example:

access-list 101 permit tcp host 192.168.5.6 host 192.168.1.1 eq telnet
access-list 101 deny tcp any any eq telnet log
access-list 101 permit ip any any

Example

access-list 106 permit ip 10.10.10.0 255.255.255.0 any
deny ip any any

Related terms

• ip access-group

See also

• Cisco IOS: Cisco IOS XE, Config (mode), VLANs, Cisco IOS logging, VTP, ACLs, show logging, show logging history, show interface status, debug, archive, show archive, conf t, int, ip http server, ip ssh, ip address, vty, show mac address-table, show access-list, Access-list, ip access-group, admin