Creating an extended bACL

An extended ACL permits or denies traffic according to one or more parameters, including source address, destination address, port, protocol (TCP or UDP), and TCP flags.

1. Enter configure terminal to access global configuration mode.
   

   device# configure terminal
   

2. Enter the ip access-list extended command to create the ACL.
   

   device(config)# ip access-list extended extdACL5
   

3. Enter rules crafted for your IP broadcast ACL (bACL).
   

   device(conf-ipacl-ext)# permit ip 2.2.2.2/32 any