Cisco Catalyst 3560-X Software Configuration Manual page 910

Using VLAN Maps with Router ACLs
Figure 1-6
Host A
(VLAN 10)
ACLs and Bridged Packets
Figure 1-7
ACLs are applied to the input VLAN. Only non-IP, non-ARP packets can be fallback-bridged.
Figure 1-7
Host A
(VLAN 10)
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-42
Applying ACLs on Switched Packets
VLAN 10
map
Frame
Host C
(VLAN 10)
VLAN 10
shows how an ACL is applied on fallback-bridged packets. For bridged packets, only Layer 2
Applying ACLs on Bridged Packets
VLAN 10
map
Frame
VLAN 10
Chapter 1
Input Output
router router VLAN 20
ACL ACL
Routing function or
fallback bridge
Packet
VLAN 20
Fallback bridge
Packet
Configuring Network Security with ACLs
map
VLAN 20
map
Host B
(VLAN 20)
VLAN 20
OL-25303-03