Configuring Mac-Based Acls - Cisco SF220-24 Administration Manual

Access Control

Configuring MAC-based ACLs

Configuring MAC-based ACLs
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x
Modifying ACLs Workflow
An ACL can only be modified if it is not in use. The following describes the process
of unbinding an ACL in order to modify it:
• If the ACL does not belong to a class map (in QoS advanced mode), but it has
been associated with an interface, unbind it from the interface on the ACL
Binding page. See
• If the ACL is part of the class map and not bound to an interface, then it can
be modified.
• If the ACL is part of a class map contained in a policy bound to an interface,
you must perform the chain of unbinding as follows:
- Unbind the policy containing the class map from the interface on the
Policy Binding page. See
- Delete the class map containing the ACL from the policy. See
Configuring QoS Policies
- Delete the class map containing the ACL. See
Mapping for more details.
MAC-based ACLs are used to filter traffic based on Layer 2 fields. MAC-based
ACLs check all frames for a match.
MAC-based ACLs are defined on the MAC-Based ACL page. The rules are
defined on the MAC-Based ACE page.
To define a MAC-based ACL:
Click Access Control > MAC-Based ACL.
The MAC-Based ACL Table displays all currently defined MAC-based ACLs.
To add a new MAC-based ACL, click Add.
Enter the name of the new ACL in the ACL Name field. ACL names are
case-sensitive.
Click Apply. The MAC-based ACL is added, and the Running Configuration is
updated.
Configuring ACL Binding
Configuring Policy Binding
for more details.
for more details.
for more details.
Configuring Class
17
236