ip access-list

To define an IP access list by name, use the ip access-list global configuration command. To remove a named IP access list, use the no form of this command.

ip access-list {standard | extended} name
no ip access-list {standard | extended} name

Caution: Named access lists will not be recognized by any software release prior to Cisco IOS Release 11.2.

Syntax Description
standard Specifies a standard IP access list.
extended Specifies an extended IP access list.
name Name of the access list. Names cannot contain a space or quotation mark, and must begin with an alphabetic character to prevent ambiguity with numbered access lists.
Default

There is no named IP access list.

Command Mode

Global configuration

Usage Guidelines

This command first appeared in Cisco IOS Release 11.2.

Use this command to configure a named IP access list as opposed to a numbered IP access list. This command will take you into access-list configuration mode, where you must define the denied or permitted access conditions with the deny and permit commands.

Specifying standard or extended with the ip access-list command determines the prompt you get when you enter access-list configuration mode.

Use the ip access-group command to apply the access-list to an interface.

Named access lists are not compatible with Cisco IOS releases prior to Release 11.2.

Example

The following example defines a standard access list named Internetfilter:

ip access-list standard Internetfilter
 permit 192.5.34.0  0.0.0.255
 permit 128.88.0.0  0.0.255.255
 permit 36.0.0.0  0.255.255.255
! (Note: all other access implicitly denied)