Create an IPv4 Access Control List

You can create an IPv4 Access Control List (ACL), which you can configure with rules that permit or deny traffic based on packet fields belonging to the IPv4 family of protocols.

About this task

Note the following naming conventions for name identifiers:
  • The name cannot exceed 64 characters.
  • The name must start with an alphabet or an underscore.
  • The name must contain alphabets, numerals, and special characters (underscores, hyphens, or periods).
  • The following reserved keywords cannot be used as name identifiers: all, ingress-group, egress, egress-group, match, list, access-list, route-map, and listener-policy.

Procedure

  1. Enter the Config mode.
    device(config)# 
  2. Create an IPv4 ACL.
    device(config)# ip access-list acl-name
    device(config)# ip access-list acl5-ipv4
    device(config-ip-acl)# permit ip any any
    device(config-ip-acl)# end
    device#
  3. Ensure that the ACL is created.
    device#show ip access-list all
    ip access-list acl5-ipv4 
      seq 10 permit ip any any
    ( 0 Packets, 0 Bytes, 0 Packets/sec, 0 Bits/sec )