Chapter 20: Access Control - Cisco 500 series Administration Manual

Stackable managed switch
Hide thumbs Also See for 500 series:
Table of Contents

Advertisement

Access Control
Access Control Lists
Cisco 500 Series Stackable Managed Switch Administration Guide
The Access Control List (ACL) feature is part of the security mechanism. ACL
definitions serve as one of the mechanisms to define traffic flows that are given a
specific Quality of Service (QoS). For more information see
General.
ACLs enable network managers to define patterns (filter and actions) for ingress
traffic. Packets, entering the switch on a port or LAG with an active ACL, are either
admitted or denied entry.
This section contains the following topics:
Access Control Lists
Defining MAC-based ACLs
IPv4-based ACLs
IPv6-Based ACLs
Defining ACL Binding
An Access Control List (ACL) is an ordered list of classification filters and actions.
Each single classification rule, together with its action, is called an Access Control
Element (ACE).
Each ACE is made up of filters that distinguish traffic groups and associated
actions. A single ACL may contain one or more ACEs, which are matched against
the contents of incoming frames. Either a DENY or PERMIT action is applied to
frames whose contents match the filter.
The switch supports a maximum of 512 ACLs, and a maximum of 512 ACEs.
24
Configuring QoS -
397

Advertisement

Table of Contents
loading

Table of Contents