Creating Ipv4-Acls Or Ipv6-Acls; Creating Ipv4-Acls - Cisco MDS 9000 Series Configuration Manual

ToS Information
ToS Information
IP packets can be filtered based on the following optional ToS conditions:
• ToS level—The level is specified by a number from 0 to 15.
• ToS name—The name can be max-reliability, max-throughput, min-delay, min-monetary-cost, and

Creating IPv4-ACLs or IPv6-ACLs

Traffic coming into the switch is compared to IPv4-ACL or IPv6-ACL filters based on the order that the filters
occur in the switch. New filters are added to the end of the IPv4-ACL or the IPv6-ACL. The switch keeps
looking until it has a match. If no matches are found when the switch reaches the end of the filter, the traffic
is denied. For this reason, you should have the frequently hit filters at the top of the filter. There is an implied
deny for traffic that is not permitted. A single-entry IPv4-ACL or IPv6-ACL with only one deny entry has
the effect of denying all traffic.
To configure an IPv4-ACL or an IPv6-ACL, follow these steps:
Procedure
Step 1
Create an IPv4-ACL or an IPv6-ACL by specifying a filter name and one or more access condition(s). Filters
require the source and destination address to match a condition. Use optional keywords to configure finer
granularity.
Note
Step 2 Apply the access filter to specified interfaces.

Creating IPv4-ACLs

To create an IPv4-ACL, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# ip access-list List1 permit ip any any
Configures an IPv4-ACL called List1 and permits IP traffic from any source address to any destination address.
Step 3
switch(config)# no ip access-list List1 permit ip any any
(Optional) Removes the IPv4-ACL called List1.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
104
normal.
The filter entries are executed in sequential order. You can only add the entries to the end of the
list. Take care to add the entries in the correct order.
Configuring IPv4 and IPv6 Access Control Lists