Configuring Ipv4 Access Control Lists - Cisco Catalyst 2960 series Configuration Manual

Configuring IPv4 Access Control Lists

Access control lists (ACLs) perform packet filtering to control which packets move through the network
and where. Such control provides security by helping to limit network traffic, restrict the access of users and
devices to the network, and prevent traffic from leaving a network. IP access lists can reduce the chance of
spoofing and denial-of-service attacks and allow dynamic, temporary user access through a firewall.
IP access lists can also be used for purposes other than security, such as bandwidth control, restricting the
content of routing updates, redistributing routes, triggering dial-on-demand (DDR) calls, limiting debug
output, and identifying or classifying traffic for quality of service (QoS) features. This module provides an
overview of IP access lists.
•
•
•
•
•
•
•
•
•
•
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not
required.
Finding Feature Information, page 1173
Prerequisites for Configuring IPv4 Access Control Lists, page 1174
Restrictions for Configuring IPv4 Access Control Lists, page 1174
Information About Configuring IPv4 Access Control Lists, page 1175
How to Configure ACLs, page 1183
Monitoring IPv4 ACLs, page 1204
Configuration Examples for ACLs, page 1206
Examples: Troubleshooting ACLs, page 1213
Additional References, page 1214
Feature Information for IPv4 Access Control Lists, page 1215
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
51
C H A P T E R
1173