Create an IP Access Control List

Learn how to create an IP access list, which you can configure with rules that permit or deny traffic based on packet fields belonging to the IPv4 family of protocols.

About this task

You must observe the following naming conventions when you create an access control list (ACL).
  • Name cannot exceed 64 characters.
  • Name must start with an alphabetic character or an underscore.
  • Name must be an arbitrary sequence of alphabetic characters, numerals, underscores, hyphens, or dots.
  • Name must not be a reserved keyword (see the Extreme 9920 Software Command Reference, 21.1.0.0 for more information).

Procedure

  1. Run the configure terminal command to access Config mode.
    The command line changes to configuration mode.
    device(config)# 
  2. Create an IPv4 ACL by running the ip access-list acl-name command .
    device(config)# ip access-list acl5-ipv4
    device(config-ip-acl)# permit ip any any
    device(config-ip-acl)# end
    device#
  3. Run the following show command to confirm the access control list was created.
    device#show ip access-list all
    ip access-list acl5-ipv4 
      seq 10 permit ip any any
    ( 0 Packets, 0 Bytes, 0 Packets/sec, 0 Bits/sec )