Computer Networks
[Day 10] 2. Standard ACL
D
DITISS AdminA Standard ACL filters traffic based solely on the source IP address, allowing or blocking traffic based on whether it matches a specified address.
Commands:
-
:
A(config)# access-list 10 permit 172.16.10.10 0.0.0.0
This command allows traffic from the exact IP address. The wildcard mask172.16.10.10ensures that only this specific IP address is allowed.0.0.0.0 -
and
A(config-if)# ip access-group 10 in:A(config-if)# ip access-group 10 out
These commands apply ACL 10 to the interface, controlling whether traffic coming into or going out of the interface is filtered.
Example: Blocking Specific IP Address
To prevent the device with IP address
172.16.10.10-
:
A(config)# access-list 10 deny 172.16.10.10 0.0.0.0
This denies traffic from the specific host. You can also use172.16.10.10instead ofhost 172.16.10.10to achieve the same result.172.16.10.10 0.0.0.0 -
:
A(config)# access-list 10 permit 0.0.0.0 255.255.255.255
This command allows all other traffic. You can usein place ofanyfor simplicity.0.0.0.0 255.255.255.255 -
:
A(config)# int g0/0
Enter the interface configuration mode for the specific interface (e.g.,).g0/0 -
:
A(config-if)# ip access-group 10 in
Apply ACL 10 to filter incoming traffic.
Important Note:
- The permit command is necessary to ensure other traffic is allowed. Without the command, only denied traffic will be filtered, and no other traffic will be permitted.
permit - The order of the commands is critical. If the command is placed after the
permitcommand, it ensures all traffic exceptdenyis allowed. Reversing the order would result in172.16.10.10being allowed due to the broader172.16.10.10rule.permit
Read Next
8/26/2026
[Day 10] 3. Golden Rules of ACL
**1. "Whatever not matching with the access list will be discarded. Therefore, there should be at least one permit statement in the access list."**...
8/26/2026
[Day 10] 4. Extended ACL
### **Extended ACL: Filtering Based on Multiple Parameters** An **Extended Access Control List (ACL)** provides more flexibility than a standard AC...