Pacl Configuration Examples - Cisco WS-C6506 Software Manual

Configuring Port-Based ACLs
This example shows how to display the ACL information for an EtherChannel:
Console> (enable) show port channel 3/40 info security-acl
Port
----- ------------------
3/37 port-based
3/38 port-based
Port
----- -------------------------------- ------
3/37 ipacl1
3/38 ipacl1
Console> (enable)

PACL Configuration Examples

This section contains the PACL configuration examples.
If no ACL is mapped to a port, the port reverts internally to VLAN-based mode.
Note
Example 1
This example shows how to map an ACL to a port when the port is in VLAN-based mode:
Console> (enable) set port security-acl 3/1 vlan-based
ACL interface is set to vlan-based mode for port(s) 3/1.
Console> (enable) set security acl map ipacl1 3/1
Port 3/1 is set to vlan-based mode, config is saved in Nvram.
Config will be applied when the port is set to port-based/merge.
Console> (enable) show security acl map config 3/1
Port
----- -------------------------------- ----
3/1
Console> (enable) show security acl map runtime 3/1
Port
----- -------------------------------- ----
No ACL mapped to port 3/1.
Console> (enable) set port security-acl 3/1 port-based
Warning: Vlan-based ACL features will be disabled on port(s) 3/1.
ACL interface is set to port-based mode for port(s) 3/1.
Console> (enable) show security acl map config 3/1
Port
----- -------------------------------- ----
3/1
Console> (enable) show security acl map runtime 3/1
Port
----- -------------------------------- ----
3/1
Console> (enable)
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
15-76
ACL-Interface Type
ACL name
ACL name
ipacl1
ACL name
ACL name
ipacl1
ACL name
ipacl1
Chapter 15
Type
IP
IP
Type
IP
Type
Type
IP
Type
IP
Configuring Access Control
OL-8978-04