
Intranet VPN Business Scenario 3-35
Creating Extended Access Lists Using Access List Numbers
Creating Extended Access Lists Using Access List Numbers
To create an extended access list that denies and permits certain types of traffic, complete
the following steps starting in global configuration mode:
Verifying Extended Access Lists
To verify the configuration:
• Enter the show access-lists 102 EXEC command to display the contents of the access
list.
hq-sanjose# show access-list 102
Extended IP access list 102
deny tcp any any
deny udp any any
permit ip any any
Step Command Purpose
1
hq-sanjose(config)# access-list 102 deny tcp any any
Define access list 102 and
configure the access list to deny all
TCP traffic.
2
hq-sanjose(config)# access-list 102 deny udp any any
Configure access list 102 to deny
all UDP traffic.
3
hq-sanjose(config)# access-list 102 permit ip any any
Configure access list 102 to permit
all IP traffic.
Comentarios a estos manuales