Chapter 27: Access Control; Access Control Lists - Cisco 500 Series Administration Manual

Access Control

Access Control Lists

Cisco 500 Series Stackable Managed Switch Administration Guide
The Access Control List (ACL) feature is part of the security mechanism. ACL
definitions serve as one of the mechanisms to define traffic flows that are given a
specific Quality of Service (QoS). For more information see
ACLs enable network managers to define patterns (filter and actions) for ingress
traffic. Packets, entering the device on a port or LAG with an active ACL, are either
admitted or denied entry.
This section contains the following topics:
• Access Control Lists
• MAC-based ACLs
• IPv4-based ACLs
• IPv6-Based ACLs
• ACL Binding
An Access Control List (ACL) is an ordered list of classification filters and actions.
Each single classification rule, together with its action, is called an Access Control
Element (ACE).
Each ACE is made up of filters that distinguish traffic groups and associated
actions. A single ACL may contain one or more ACEs, which are matched against
the contents of incoming frames. Either a DENY or PERMIT action is applied to
frames whose contents match the filter.
The device supports a maximum of 512 ACLs, and a maximum of 512 ACEs.
27
Quality of Service.
580