Ip Access-List - Cisco Nexus 7000 Series Command Reference Manual

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

ip access-list

To create an IPv4 access control list (ACL) or to enter IP access list configuration mode for a specific ACL,

use the ip access-list command. To remove an IPv4 ACL, use the no form of this command.

ip access-list access-list-name

no ip access-list access-list-name

Syntax Description

access-list-name

Command Default

Command Modes

Global configuration

Command History

Usage Guidelines

No IPv4 ACLs are defined by default.

Use IPv4 ACLs to filter IPv4 traffic.

When you use the ip access-list command, the device enters IP access list configuration mode, where you

can use the IPv4 deny and permit commands to configure rules for the ACL. If the ACL specified does not

exist, the device creates it when you enter this command.

Use the ip access-group command to apply the ACL to an interface as a router ACL. Use the ip port

access-group command to apply the ACL to an interface as a port ACL.

Every IPv4 ACL has the following implicit rule as its last rule:

deny ip any any

This implicit rule ensures that the device denies unmatched IP traffic.

Unlike IPv6 ACLs, IPv4 ACLs do not include additional implicit rules to enable the neighbor discovery

process. The Address Resolution Protocol (ARP), which is the IPv4 equivalent of the IPv6 neighbor discovery

process, uses a separate data link layer protocol. By default, IPv4 ACLs implicitly allow ARP packets to be

sent and received on an interface.

Use the statistics per-entry command to configure the device to record statistics for each rule in an IPv4

ACL. The device does not record statistics for implicit rules. To record statistics for packets that would match

the implicit deny ip any any rule, you must explicitly configure an identical rule.

This command does not require a license.

Cisco Nexus 7000 Series Security Command Reference

Name of the IPv4 ACL. The name has a maximum

of 64 alphanumeric, case-sensitive characters but

cannot contain a space or quotation mark.

Modification

This command was introduced.