Log in
|
How to Buy
|
Contact Us
|
United States (Change)

## Choose Country

### North America

- United States

### Europe

- Deutschland - Germany
- España - Spain
- France
- Italia - Italy
- Россия - Russia
- United Kingdom

### Asia Pacific

- Asean Region (Vietnam, Indonesia, Singapore, Malaysia)
- Australia
- 中国 - China
- India
- 日本 - Japan
- 대한민국 - Korea
- 台灣 - Taiwan

Remember my choice

# Technical Documentation

Download Software
Research a Problem
Case Management
Contract & Product Management
Technical Documentation
Documentation Archive
Enterprise MIBs
File Format Help
Glossary
Portable Libraries
End-of-Life Products
Contact Support
Guidelines and Policies
Security Resources
Rate and give feedback: Feedback Received. Thank You!
Rate and give feedback:
This document helped resolve my issue. Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:
E-mail:

# access-list

#### Syntax

Standard IP access list:

access-list accessListName { permit | deny }
{ srcIP srcWildIp | [ host ] srcIPHost | any } [ log ]

no access-list accessListName [ { permit | deny }
{ srcIP srcWildIp | [ host ] srcIPHost | any } [ log ] ]

Extended IP access list:

access-list accessListName { permit | deny } ip { srcIP srcWildIp |
host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ]

no access-list accessListName [ { permit | deny } ip { srcIP srcWildIp |
host srcIPHost | any } { dstIP dstWildIp | host dstIPHost | any } [ log ] ]

#### Release Information

Command introduced before JunosE Release 7.1.0.

#### Description

Defines a standard or extended IP access list. The extended access list enables you to specify a destination address or host, precedence, and type of service. This command imposes an implicit last rule of “ deny ip any any” to deny all routes that do not match previous rules in the access list. The no version removes the IP access list, the specified entry in an access list, or the log for a specified entry.

#### Options

- accessListName—String of up to 32 alphanumeric characters
- permit—Permits access if the conditions are matched
- deny—Denies access if the conditions are matched
- srcIP—Source IP address from which the packet is being sent
- srcWildIp—Wildcard mask IP address
- host—Identifies the address as a host
- srcIPHost—Source host IP address; assumes a wildcard mask of 0
- any—Creates an address of 0.0.0.0 with a wildcard mask of 255.255.255.255
- dstIP—Destination IP address
- dstWildIp—Wildcard mask IP address for destination
- dstIPHost—Destination host IP address to which the packet is being sent
- log—Logs an Info event into the ipAccessList log whenever the access-list rule is matched

#### Mode

Global Configuration

#### Published: 2011-04-07

Site Map / RSS Feeds / Careers / Accessibility / Feedback / Privacy & Policy / Legal Notices
Copyright© 1999-2011 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out