HP Cisco MDS 9216 - Fabric Switch Configuration Manual page 810

Applying an IP-ACL to an Interface
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
The terms in, out, source, and destination are used as referenced by the switch:
In—Traffic that arrives at the interface and goes through the switch; the source is where it
•
transmitted from and the destination is where it is transmitted to (on the other side of the router).
Tip
• Out—Traffic that has already been through the switch and is leaving the interface; the source is
where it transmitted from and the destination is where it is transmitted to.
Tip
To apply an IP-ACL to an interface using Fabric Manager, follow these steps:
Step 1 Expand Switches > Security and then select IP ACL in the Physical Attributes pane.
You see the IP-ACL configuration in the Information pane.
Click the Interfaces tab.
Step 2
You see a list of interfaces and associated IP-ACLs.
Click Create Row.
Step 3
You see the Create Interfaces dialog box shown in
Figure 42-7
Step 4 Optionally, remove the switches you do not want to include in the IP-ACL by unchecking the check
boxes next to the switch addresses.
Set the interface you want associated with an IPv4-ACL or IPv6-ACL in the Interface field.
Step 5 Choose a ProfileDirection (either inbound or outbound).
Step 6 Enter the IP-ACL name in the Profile Name field.
Note
Step 7 Click Create to associate the IP-ACL.
Cisco MDS 9000 Family CLI Configuration Guide
42-10
The IP-ACL applied to the interface for the ingress traffic affects both local and remote traffic.
The IP-ACL applied to the interface for the egress traffic only affects local traffic.
Create Interfaces Dialog Box
This IP-ACL name must have already been created using the Create Profiles dialog box. If not,
no filters will be enabled until you to go to the Create Profiles dialog box and create the profile.
Chapter 42 Configuring IPv4 and IPv6 Access Control Lists
Figure 42-7.
OL-16184-01, Cisco MDS SAN-OS Release 3.x