Unsupported Features; Creating Standard And Extended Ip Acls - Cisco Catalyst 2950 Software Configuration Manual

Chapter 28 Configuring Network Security with ACLs
Release 12.1. For detailed information about the commands, see the Cisco IOS IP and IP Routing
Command Reference, Cisco IOS Release 12.1. For a list of Cisco IOS features not supported on the
switch, see the

Unsupported Features

The switch does not support these Cisco IOS router ACL-related features:
•
•
•
•
•
•
•
•
•
•

Creating Standard and Extended IP ACLs

This section describes how to create switch IP ACLs. The switch tests packets against the conditions in
an access list one by one. The first match determines whether the switch accepts or rejects the packet.
Because the switch stops testing conditions after the first match, the order of the conditions is critical.
If no conditions match, the switch denies the packet.
Follow these steps to use ACLs:
Create an ACL by specifying an access list number or name and access conditions.
Step 1
Apply the ACL to interfaces or terminal lines.
Step 2
The software supports these kinds of IP access lists:
•
•
MAC extended access list use source and destination MAC addresses and optional protocol type
Note
information for matching operations. For more information, see the
ACLs" section on page
The next sections describe access lists and the steps for using them.
78-11380-12
"Unsupported Features" section on page
Non-IP protocol ACLs (see
Bridge-group ACLs
IP accounting
ACL support on the outbound direction
Inbound and outbound rate limiting (except with QoS ACLs)
IP packets that have a header length of less than 5 bytes
Reflexive ACLs
Dynamic ACLs (except for certain specialized dynamic ACLs used by the switch clustering feature)
ICMP-based filtering
Interior Gateway Routing Protocol (IGMP)-based filtering
Standard IP access lists use source addresses for matching operations.
Extended IP access lists use source and destination addresses for matching operations and optional
protocol-type information for finer granularity of control.
28-17.
28-7.
Table 28-2 on page 28-8)
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Configuring ACLs
"Creating Named MAC Extended
28-7