Acls And Bridged Packets; Acls And Routed Packets - Cisco Catalyst 3750 Software Configuration Manual

Using VLAN Maps with Router ACLs

ACLs and Bridged Packets

Figure 25-7
Layer 2 ACLs are applied to the input VLAN. Only non-IPv4, non-ARP packets can be fallback-bridged.
Figure 25-7 Applying ACLs on Bridged Packets
Host A
(VLAN 10)

ACLs and Routed Packets

Figure 25-8
in this order:
1.
2.
3.
4.
Figure 25-8 Applying ACLs on Routed Packets
Host A
(VLAN 10)
Catalyst 3750 Metro Switch Software Configuration Guide
25-36
shows how an ACL is applied on fallback-bridged packets. For bridged packets, only
VLAN 10
map
Frame
VLAN 10
shows how ACLs are applied on routed packets. For routed packets, the ACLs are applied
VLAN map for input VLAN
Input router ACL
Output router ACL
VLAN map for output VLAN
VLAN 10
map
Frame
VLAN 10
Chapter 25
VLAN 20
Fallback bridge
Packet
Input Output
router router VLAN 20
ACL ACL
Routing function
Packet
Configuring Network Security with ACLs
map
Host B
(VLAN 20)
VLAN 20
map
Host B
(VLAN 20)
VLAN 20
78-15870-01