1.建立一個測試用訪問控制列表 R1(config)#ipaccess-list extended 199 R1(config-ext-nacl)#deny tcp any any eq 80 R1(config-ext-nacl)#deny udp any any eq 8000 R1(config-ext-nacl)#permit ip any any R1#show run include 199 access-list 199 deny tcp any any eq www access-list 199 deny udp any any eq 8000 access-list 199 permit ip any any
2.顯示訪問控制列表語句的當前序號 R1#show ip access-lists 199 Extended IP access list 199 10 deny tcp any any eq www 20 deny udp any any eq 8000 30 permit ip any any
3.在訪問控制列表中指定的位置上增加一個語句 R1(config)#ip access-list extended 199 R1(config-ext-nacl)#12 permit udp any host 192.168.1.1 eq 8000 R1#show ip access-lists 199 Extended IP access list 199 10 deny tcp any any eq www 12 permit udp any host 192.168.1.1 eq 8000 20 deny udp any any eq 8000 30 permit ip any any
4.刪除訪問控制列表中的某個特定語句 R1(config)#ip access-list extended 199 R1(config-ext-nacl)#no 20 R1#show ip access-lists 199 Extended IP access list 199 10 deny tcp any any eq www 12 permit udp any host 192.168.1.1 eq 8000 30 permit ip any any
5.重新編排一個訪問控制列表的序號 R1(config)#ip access-list resequence 199 10 10 R1(config)#do show ip access-lists 199 Extended IP access list 199 10 deny tcp any any eq www 20 permit udp any host 192.168.1.1 eq 8000 30 permit ip any any (在這里do 命令運行您在配置模式下執行一個EXEC命令，該命令要求IOS版本12.2(8)T 以上)
