Cisco ACL Generator

Build a Cisco extended access-list entry with live IOS syntax preview.

ACL number (100-199)

Action

Protocol

Source (any, host 1.2.3.4, or net wildcard)Destination (any, host 1.2.3.4, or net wildcard)Port (tcp/udp only)Remark (optional)

access-list 100 permit tcp any any

How to read the result

Extended ACLs are numbered 100-199. Each line matches protocol plus source and destination. An implicit deny ip any any ends every ACL, so permit what you need explicitly.

Example

access-list 100 permit tcp any any eq 80

FAQ

What address formats work?

Use "any", "host 1.2.3.4", or "network wildcard" like "10.0.0.0 0.0.0.255".

When is the port field used?

Only for TCP/UDP, e.g. "eq 80" or "range 1000 2000". It is ignored for ip/icmp.

Is there an implicit deny?

Yes. Every ACL ends with deny ip any any, so add explicit permit lines first.