Cisco 3020 - Catalyst Blade Switch Command Reference Manual page 127

Chapter 2 Cisco Catalyst Blade Switch 3020 for HP Cisco IOS Commands
For standard inbound access lists, after the switch receives a packet, it checks the source address of the
packet against the access list. IP extended access lists can optionally check other fields in the packet,
such as the destination IP address, protocol type, or port numbers. If the access list permits the packet,
the switch continues to process the packet. If the access list denies the packet, the switch discards the
packet.
If the specified access list does not exist, all packets are passed.
Examples
This example shows how to apply IP access list 101 to inbound packets on a port:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# ip access-group 101 in
You can verify your settings by entering the show ip interface, show access-lists, or show ip
access-lists privileged EXEC command.
Related Commands Command
access list
ip access-list
show access-lists
show ip access-lists
show ip interface
OL-8916-01
Description
Configures a numbered ACL. For syntax information, select Cisco
IOS IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands
Configures a named ACL. For syntax information, select Cisco IOS
IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands.
Displays ACLs configured on the switch.
Displays IP ACLs configured on the switch. For syntax
information, select Cisco IOS IP Command Reference, Volume 1
of 3:Addressing and Services, Release 12.2 > IP Services
Commands.
Displays information about interface status and configuration. For
syntax information, select Cisco IOS IP Command Reference,
Volume 1 of 3:Addressing and Services, Release 12.2 > IP
Services Commands.
Cisco Catalyst Blade Switch 3020 for HP Command Reference
ip access-group
2-99