Creating a standard IPv4 ACL

A standard ACL permits or denies traffic according to source address only.

1. Enter configure terminal to access global configuration mode.
   

   device# configure terminal
   

2. Enter the ip access-list standard command to create the access list.
   

   device(config)# ip access-list standard stdACL3
   

3. Enter rules, specifying the needed parameters.
   

   device(conf-ipacl-std)# seq 5 permit host 10.20.33.4
   device(conf-ipacl-std)# seq 15 deny any
   

4. Apply the ACL that you created to the appropriate interface.

Example

The following example shows how to create a standard IPv4 ACL, define rules for it, and apply the ACL to an interface.

device# configure
device(config)# ip access-list standard stdACL3
device(conf-ipacl-std)# seq 5 permit host 10.20.33.4
device(conf-ipacl-std)# seq 10 permit 20.20.33.5
device(conf-ipacl-std)# seq 15 deny any
device(conf-ipacl-std)# exit
device(config)# interface ethernet 5/2
device(conf-if-eth-5/2)# ip access-group stdACL3 in