Named ACL config mode is a Cisco IOS configuration mode for adding, editing, deleting, and ordering individual access control entries (ACEs) within an ACL. section 23.2.2 section 24.3.1
Use the mode to manage ACL entries without rebuilding the entire list:
- Enter a standard ACL with ip access-list standard name. section 23.2.2
- Add an ACE with permit or deny, optionally preceded by a sequence number. section 23.2.2
- Remove an entry with no sequence-number, or insert a replacement at a chosen sequence. section 24.3.1
- Configure extended ACLs with ip access-list extended name or number. section 24.4
Blocking two hosts while permitting the rest
Create BLOCK_MARTHA_BOB, deny the two host addresses, then permit any remaining traffic. Sequence numbers commonly begin at 10 and increase by 10, leaving room for later insertions. section 23.2.2
R2(config)# ip access-list standard BLOCK_MARTHA_BOB #1
R2(config-std-nacl)# deny 192.168.1.11 #2
R2(config-std-nacl)# deny 192.168.2.17 #2
R2(config-std-nacl)# permit any #3
R2(config-std-nacl)# do show access-lists BLOCK_MARTHA_BOB
Standard IP access list BLOCK_MARTHA_BOB
10 deny 192.168.1.11
20 deny 192.168.2.17
30 permit any
#1 Creates the standard named ACL
#2 Denies Martha and Bob
#3 Permits all other traffic
Follow the Cisco IOS prompt sequence from ACL creation through ACE verification. section 23.2.2
