| 11.2 |  | Access Control Lists (ACLs) |
| 11.2.3 |  | Named ACLs |

| IP named ACLs were introduced in Cisco IOS Software Release 11.2, allowing standard and extended ACLs to be given names instead of numbers. The advantages that a named access list provides are: Intuitively identify an ACL using an alphanumeric name. Eliminate the limit of 798 simple and 799 extended ACLs Named ACLs provide the ability to modify ACLs without deleting and then reconfiguring them. It is important to note that a named access list will allow the deletion of statements but will only allow for statements to be inserted at the end of a list. Even with named ACLs it is a good idea to use a text editor to create them. Consider the following before implementing named ACLs. Named ACLs are not compatible with Cisco IOS releases prior to Release 11.2. The same name may not be used for multiple ACLs. For example, it is not permissible to specify both a standard and extended ACL named George. It is important to be aware of named access lists because of the advantages just discussed. Advanced access list operations such as named ACLs will be presented in the CCNP curriculum. A named ACL is created with the ip access-list command. This places the user in the ACL configuration mode. In ACL configuration mode, specify one or more conditions to be permitted or denied. This determines whether the packet is passed or dropped when the ACL statement matches. The configuration shown creates a standard ACL named Internet filter and an extended ACL named “marketing_group”. Also shown is how the named access lists are applied to an interface.
| Lab Activity Lab Exercise: Configuring a Named Access List In this lab, the student will create a named ACL to permit or deny specific traffic.
| Lab Activity Lab Exercise: VTY Restriction In this lab, the student will use the access-class and line commands to control telnet access to the router.
| Lab Activity Lab Exercise: Simple DMZ Extended Access Lists In this lab, the student will use extended access lists to create a simple DeMilitarized Zone (DMZ).
| Lab Activity Lab Exercise: Multiple Access Lists Functions (Challenge Lab) In this lab, the student will configure and apply an extended access control list to control Internet traffic using one or more routers.
| Lab Activity e-Lab Activity: Named ACL In this lab, the students will configure a named access-control list for the local router "Ougoudou".
| Lab Activity e-Lab Activity: Configuring a Named Access List In this lab, the students will create a named ACL to permit or deny specific traffic and test the ACL to determine if the desired results were achieved.
| Web Links ip access-list Command http://www.cisco.com/en/US/products/sw/ iosswrel/ps1835/ products_command_reference_ chapter09186a00800873c8.html#1018731