- So when it comes to access lists
we know that at a high level
you have a choice of standard or extended.
And we've talked pretty extensively about both types.
Now up until now in order to demonstrate
standard and extended access lists,
I've showed you their implementation with
numbered access lists where you say access-list,
you provide a number,
and then Cisco IOS identifies that number
as either belonging to the range of standard
or the range of extended.
Now I've mentioned a couple of times
that an alternative approach
is to use standard or extended access lists
in conjunction with named access lists.
Where instead of specifying a number,
you specify a descriptive name,
so that when you're running through your configuration,
why you've created that access list in the first place
is a little bit more meaningful to you.
And that's what we're gonna look at real quickly here.
So one of the benefits of configuring named access lists
is it allows you to more easily edit them.
So I've showed you in the previous video that
if you had a numbered access list with several ACE,
Access Control Entries,
if you tried to delete one of those ACE's
the entire numbered access list was deleted.
Now with a named access list,
it's much easier to delete individual lines of an ACE
because they're actually sequenced;
they're provided with sequenced numbers
and you could just select a particular sequence number
and delete just that sequence number.
So here is how you configure them.
I'm not gonna do a lab on this,
but the idea is still pretty much the same.
So at the global configuration level,
notice what we're doing here,
we type instead of access-list and then a number,
we preface it with the word ip.
So when your access list starts with the word ip,
now Cisco IOS knows that you're gonna be configuring
a named access list.
So ip access-list,
and then after that, you're gonna specify
either extended or standard.
So see it starts out the same way:
ip access-list, you can use the word extended...
Oops, what happened there?
Or you can use the word, standard.
So what you provide right here
will dictate what your options are in the access list.
And then, right here is where you type your name.
Whatever you want your descriptive name to be.
ip access-list standard payroll or
ip access-list extended deny engineering.
And then you're placed into your named access list mode,
and here, for example, with the standard access list,
you say permit or deny,
and then you type in your source address,
and your wildcard.
It's now showing you the wildcard here
but the wildcard mask would still be a part of this.
And the way that you would apply it
is still with the ip access-group command,
but instead of putting a number like
ip access-group one in,
or 101 out,
you reference the name instead.
And here's an example of
how you do it with an extended access list.
Same thing.
Start out with the word ip,
which tells IOS okay, I'm now gonna be giving
an extended... I'm gonna be giving a named accessed list,
and then you say access-list and
whatever type you want, standard or extended,
and because we've gone extended,
we are now in extended access list mode,
where you have all the same options available to you
as you would with a numbered extended access list.