Creating a standard IPv4 ACL

A standard ACL permits or denies traffic according to source address only.

  1. Enter configure terminal to access global configuration mode.
    device# configure terminal
    
  2. Enter the ip access-list standard command to create the access list.
    device(config)# ip access-list standard stdACL3
    
  3. Enter rules, specifying the needed parameters.
    device(conf-ipacl-std)# seq 5 permit host 10.20.33.4
    device(conf-ipacl-std)# seq 15 deny any
    
  4. Apply the ACL that you created to the appropriate interface.
The following example shows how to create a standard IPv4 ACL, define rules for it, and apply the ACL to an interface.
device# configure
device(config)# ip access-list standard stdACL3
device(conf-ipacl-std)# seq 5 permit host 10.20.33.4
device(conf-ipacl-std)# seq 10 permit 20.20.33.5
device(conf-ipacl-std)# seq 15 deny any
device(conf-ipacl-std)# exit
device(config)# interface ethernet 5/2
device(conf-if-eth-5/2)# ip access-group stdACL3 in