IP named ACLs were introduced in Cisco IOS
Software Release 11.2, allowing standard and extended ACLs to be given
names instead of numbers.
 The
advantages that a named access list provides are:
-
Intuitively identify an ACL using an
alphanumeric name.
- Eliminate the limit of 798 simple
and 799 extended ACLs
-
Named ACLs provide the ability to modify ACLs without deleting
and then reconfiguring them. It is important to note that a named
access list will allow the deletion of statements but will only
allow for statements to be inserted at the end of a list. Even with
named ACLs it is a good idea to use a text editor to create them.
Consider the following before
implementing named ACLs.
Named ACLs are not compatible with
Cisco IOS releases prior to Release 11.2.
The same name may not be used for
multiple ACLs. For example, it is not permissible to specify both a
standard and extended ACL named George.
It is important to be aware of named
access lists because of the advantages just discussed. Advanced access
list operations such as named ACLs will be presented in the CCNP
curriculum.
A named ACL is created with the
ip access-list
command. 
This places the user in the ACL configuration mode. In ACL
configuration mode, specify one or more conditions to be permitted or
denied.
 This determines whether the packet is passed or dropped when
the ACL statement matches.
The configuration shown creates a
standard ACL named Internet filter and an extended ACL named “marketing_group”.
 Also shown
is how the named access lists are applied to an interface.
| |
Lab Activity
Lab Exercise: Configuring a Named Access List
In this lab, the student will
create a named ACL to permit or deny specific traffic.
|
|
|
| |
Lab Activity
Lab Exercise: VTY Restriction
In this lab, the student will use the access-class and line commands to control
telnet access to the router.
|
|
|
| |
Lab Activity
Lab Exercise: Simple DMZ Extended Access Lists
In this lab, the student will use extended access lists to
create a simple DeMilitarized Zone (DMZ).
|
|
|
| |
Lab Activity
Lab Exercise: Multiple Access Lists Functions (Challenge Lab)
In this lab, the student will
configure and apply an extended access control list to control
Internet traffic using one or more routers.
|
|
|
| |
Lab Activity
e-Lab Activity: Named ACL
In this lab, the students will configure a named
access-control list for the local router "Ougoudou".
|
|
| |
Lab Activity
e-Lab Activity: Configuring a Named Access List
In this lab, the students will create a named ACL to permit
or deny specific traffic and test the ACL to determine if the
desired results were achieved.
|
|
|
Web Links