Cisco WS-C6506 Software Manual page 471

Chapter 15 Configuring Access Control
Console> (enable) set port security-acl 3/1 vlan-based
ACL interface is set to vlan-based mode for port(s) 3/1.
Console> (enable) set security acl map ipacl1 3/1
Port 3/1 is set to vlan-based mode, config is saved in Nvram.
Config will be applied when the port is set to port-based/merge mode.
Console> (enable)
Displaying ACL Mapping Information
The show security acl map command is extended to display the port mappings as follows:
•
•
To display the ACL mapping information, perform this task in normal mode:
Task
Display the ACL mapping information. show security acl map [config | runtime] [acl_name |
These examples show how to display the ACL mapping information:
Console> (enable) show security acl map config all
ACL Name
-------------------------------- ---- --------------
ipacl1
ipacl2
Console> (enable) show security acl map config all-ports
ACL Name
-------------------------------- ---- --------------
ipacl2
Console> (enable) show security acl map runtime 3/1
Port
----- -------------------------------- ----
3 / 1 ipacl1
Console> (enable)
Displaying ACL Information for an EtherChannel
The show port channel command is extended to display the PACL mappings on the port channels. For
type, you can specify security-acl.
To display the ACL information for an EtherChannel, perform this task in normal mode:
Task
Display the ACL information for an
EtherChannel.
OL-8978-04
Added mandatory keywords (config and runtime) to display the configuration and run-time
mappings.
Added optional keywords (all-vlans and all-ports) to selectively display the configured VACLs and
PACLs.
ACL name
Command
mod_num/port_num | vlan | all | all-vlans | all-ports]
Type Ports/Vlans
IP 11
IP 3/1
Type Ports
IP 3/1
Type
IP
Command
show port channel [all | mod[/port]] {info [type]}
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring Port-Based ACLs
15-75