Configuring Pacls; Creating A Pacl - Cisco 4500M Software Manual

Configuring PACLs

Figure 35-6 Applying ACLs on Routed Packets
Host A
(VLAN 10)
Configuring PACLs
This section describes how to configure PACLs, which are used to control filtering on Layer 2 interfaces.
PACLs can filter traffic to or from Layer 2 interfaces based on Layer 3 information, Layer 4 head
information or non-IP Layer 2 information.
This section contains the following topics:
•
•
•
•
•
•
•

Creating a PACL

To create a PACL and apply it to one or more interfaces, perform this task:
Create the standard or extended IP ACLs or named MAC extended ACLs that you want to apply to the
Step 1
interface.
Use the ip access-group or mac access-group interface command to apply a IP ACL or MAC ACL to
Step 2
one or more Layer 2 interfaces.
Software Configuration Guide—Release 12.2(25)EW
35-22
VLAN 10
map
Frame
VLAN 10
Creating a PACL, page 35-22
PACL Configuration Guidelines, page 35-23
Configuring IP and MAC ACLs on a Layer 2 Interface, page 35-23
Using PACL with Access-Group Mode, page 35-24
Configuring Access-group Mode on Layer 2 Interface, page 35-24
Applying ACLs to a Layer 2 Interface, page 35-25
Displaying an ACL Configuration on a Layer 2 Interface, page 35-25
Chapter 35
Catalyst 4500 series switch
Input Output
router router
ACL ACL
Routing function
Packet
Configuring Network Security with ACLs
VLAN 20
map
Host B
(VLAN 20)
VLAN 20
OL-6696-01