CLI Reference Guide-R04

Table Of Contents
Chapter 10
| Access Control Lists
ACL Information
– 404 –
permit any host 00-e0-29-94-34-de ethertype 0800
IP extended access-list pop3-secure:
permit TCP any any source-port 995 destination-port 885
IP extended access-list smtp-nonsecure:
permit TCP any any source-port 25 destination-port 25
IP extended access-list smtp-secure-tls:
permit TCP any any source-port 587 destination-port 587
IP extended access-list pop3-nonsecure:
permit TCP any any source-port 110 destination-port 110
IP extended access-list smtp-secure-ssl:
permit TCP any any source-port 465 destination-port 465
IP extended access-list extipv4:
permit 0 host 192.168.2.2 host 192.168.2.3
permit any any tos 0
permit UDP any any
permit 10.7.1.1 255.255.255.0 any
permit TCP 192.168.1.0 255.255.255.0 any destination-port 80
permit TCP 192.168.1.0 255.255.255.0 any control-flag 2 2
IPv6 extended access-list ipv6ext:
permit TCP any any source-port 80
permit TCP any host 2009:db9:2229::79 source-port 80
permit TCP any host 2009:db9:2229::79 DSCP 0 source-port 80 destination-port
8
080
IPv6 extended access-list qq:
IPv6 extended access-list ipv6etxacl:
ARP access-list arplist:
ARP access-list arper:
permit ip any any mac any any log
permit ip any any mac any any
permit request ip any any mac any any
Console#show access list
% Ambiguous command : "show access list"
Console#show access-list
MAC access-list mack:
permit any any VID 1 1 ethertype 0000 0000
permit any any VID 1 1
permit any any VID 1
permit any any
permit any host 00-e0-29-94-34-de ethertype 0800
IP extended access-list pop3-secure:
permit TCP any any source-port 995 destination-port 885
IP extended access-list smtp-nonsecure:
permit TCP any any source-port 25 destination-port 25
IP extended access-list smtp-secure-tls:
permit TCP any any source-port 587 destination-port 587
IP extended access-list pop3-nonsecure:
permit TCP any any source-port 110 destination-port 110
IP extended access-list smtp-secure-ssl:
permit TCP any any source-port 465 destination-port 465
IP extended access-list extipv4:
permit 0 host 192.168.2.2 host 192.168.2.3
permit any any tos 0
permit UDP any any
permit 10.7.1.1 255.255.255.0 any
permit TCP 192.168.1.0 255.255.255.0 any destination-port 80
permit TCP 192.168.1.0 255.255.255.0 any control-flag 2 2
IPv6 extended access-list ipv6ext:
permit TCP any any source-port 80
permit TCP any host 2009:db9:2229::79 source-port 80
permit TCP any host 2009:db9:2229::79 DSCP 0 source-port 80 destination-port
8
080
IPv6 extended access-list qq:
IPv6 extended access-list ipv6etxacl: