From 85975a50aecee70c7c26eb22ced42bfacaad4306 Mon Sep 17 00:00:00 2001 From: arc Date: Tue, 28 Nov 2023 22:17:06 +0000 Subject: [PATCH] Update 'IT/Configuring a Cisco IOS Switch.md' --- IT/Configuring a Cisco IOS Switch.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/IT/Configuring a Cisco IOS Switch.md b/IT/Configuring a Cisco IOS Switch.md index 773b798..61c4028 100644 --- a/IT/Configuring a Cisco IOS Switch.md +++ b/IT/Configuring a Cisco IOS Switch.md @@ -97,6 +97,20 @@ vlan [vlan-id] no shutdown ``` +# Access list management +Access lists are created implicitly when you apply the first configuration. More docs for access list management can be found at . +### Permitting a particular network for a numbered access list +From the privileged exec terminal: +``` +access-list [access-list-num] permit [network] [wildcard-mask] +``` +`permit` can be substituted with `deny` to instead explictly deny a network. An example of a valid network could be `192.168.1.0`, and a wildcard mask for a `/24` would be `0.0.0.255`. Unless explictly stated, an access list will deny all other traffic. You can explicitly allow traffic by default for a numbered access list with `access-list [access-list-num] permit any`. + +### Denying traffic from a particular address for a numbered access list +``` +access-list [access-list-num] deny [address] +``` + # Viewing configs ### Vlan config From the privileged exec terminal: