ACL-Iran-IPs.txt
Cisco standard ACL format using network addresses and wildcard masks.
CISCO NETWORKING
Cisco Iran IP List
Iranian IPv4 prefixes formatted for Cisco standard access-control lists, network filtering, routing policy and infrastructure automation.
Cisco ACL Download
Ready-to-use Cisco standard ACL entries generated from the current Iran IPv4 prefix database.
Plain IPv4 List
Use the plain prefix list when generating your own Cisco configurations or automation.
Cisco ACL Format
Each IPv4 CIDR prefix is converted to a Cisco network address and wildcard mask.
ip access-list standard ACL-Iran-IPs
remark Organization
permit 185.67.12.0 0.0.3.255
The wildcard mask is calculated from the CIDR prefix. For example, 185.67.12.0/22 becomes 185.67.12.0 0.0.3.255.
The generated ACL does not add an explicit
deny any. Apply your own final policy
according to the intended ACL behavior.
Installing the ACL on a Cisco Router
The generated file can be copied into the router configuration workflow.
Enter configuration mode
configure terminal
Create the ACL
ip access-list standard ACL-Iran-IPs
Add the generated entries
Paste the generated
permit
statements from the downloaded file.
Verify the configuration
show ip access-lists ACL-Iran-IPs
Applying the ACL
A standard ACL can be applied where appropriate for the intended Cisco platform and network design.
interface GigabitEthernet0/0
ip access-group ACL-Iran-IPs in
This is an example only. Direction, interface, platform capabilities and existing security policy must be reviewed before applying an ACL in production.
Cisco Routing and Policy Automation
Access Control
Use the generated prefixes as input for access-control policies where a static prefix-based policy is appropriate.
Network Automation
The plain-text and Cisco-formatted files can be consumed by configuration-management and network-automation systems.
Consistent Prefix Data
The Cisco output is generated from the same Iranian prefix dataset used by the other published formats.
Important: ACL Size and Platform Design
The Iranian IPv4 dataset contains many prefixes. Before deploying the complete ACL on a production router, verify the platform's ACL scale, TCAM resources, software version and existing policy configuration.
For large-scale environments, routing policy, prefix-lists, object-groups or other platform-specific mechanisms may be more appropriate than a single large standard ACL.
Related Resources
MikroTik Iran IP List
RouterOS RSC files and automated update resources.
Open MikroTikIran IPv4 List
Current Iranian IPv4 prefixes and download formats.
Open IPv4Iran IPv6 List
Current Iranian IPv6 prefix information.
Open IPv6
Data Source
Iran IP List is generated from RIPE NCC membership allocation information.
The underlying RIPE NCC source data remains subject to the applicable RIPE NCC terms and conditions.