Access-Group Mode - Cisco 4500M Command Reference Manual

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

access-group mode

To specify override modes (for example, VACL overrides PACL) and non-override modes (for example,
merge or strict mode), use the access-group mode command. Use the no form of this command to return
to preferred port mode.
Syntax Description
prefer port
prefer vlan
merge
Defaults
PACL override mode
Command Modes
Interface configuration
Command History Release
12.1(19)EW
Usage Guidelines
On the Layer 2 interface, prefer port, prefer VLAN, and merge modes are supported. A Layer2 interface
can have one IP ACL applied in either direction (one inbound and one outbound).
Examples
This example shows how to make the PACL mode on the switch take effect:
(config-if)# access-group mode prefer port
This example shows how to merge applicable ACL features:
(config-if)# access-group mode merge
Related Commands
show access-group mode interface
show ip interface (refer to Cisco IOS documentation)
show mac access-group interface
78-16201-01
access-group mode {prefer {port | vlan} | merge}
no access-group mode {prefer {port | vlan} | merge}
Specifies that the PACL mode take precedence if PACLs are configured. If no
PACL features are configured on the port, other features applicable to the
interface are merged and applied on the interface.
Specifies that the VLAN-based ACL mode take precedence. If no VLAN-based
ACL features are configured on the port's VLAN, the PACL features on the port
are applied.
Merges applicable ACL features before they are programmed into the hardware .
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
access-group mode
2-5