Creating A Placeholder For A Downloaded Acl - Cisco WS-C6506 Software Manual

Downloadable ACLs
dacl1x editbuffer modified. Use 'commit' command to apply changes.
Console> (enable) set security acl ip dacl1x permit dhcp-snooping
Successfully configured DHCP Snooping for ACL dacl1x. Use 'commit' command to save
changes.
Console> (enable) set security acl ip dacl1x include downloaded-acl dot1x
Successfully configured placeholder download ACL dacl1x. Use 'commit' command to save
changes.
Console> (enable) set security acl ip dacl1x include ip-phone
Successfully configured placeholder download ACL dacl1x. Use 'commit' command to save
changes.
Console> (enable) commit security acl all
Commit operation in progress.
Display the child ACL with an IP phone configured.
Step 2
Console> (enable) show security acl downloaded-acl ipphone-map
Port
----- ------------------------------
4/1
Console> (enable) show security acl tcam interface 4/1
Input
IP
0. redirect arp (matches 0)
1. redirect udp any any (matches 0)
2. redirect udp any 21862 host 9.6.6.3 53000 (matches 0)
3. redirect tcp any any 80 (matches 0)
4. permit ip host 9.6.6.135 any (matches 10)
5. deny ip any any (matches 0)
Console> (enable) show security acl info dacl_4_1
set security acl ip dacl_4_1
---------------------------------------------------
arp permit
1. permit arp-inspection host 9.2.2.2 any
2. permit dhcp-snooping
3. permit eapoudp
4. include downloaded-acl web-auth
5. permit url-redirect
6. permit ip host 9.6.6.135 any
7. include ip-phone
8. include downloaded-acl dot1x
9. include downloaded-acl macauth-bypass
10. include downloaded-acl eou
Note

Creating a Placeholder for a Downloaded ACL

To create a placeholder for a downloaded ACL, perform this task in enable mode:
Task
Create a placeholder for a downloaded
ACL.
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
15-120
IP Address
9.6.6.135
In the above sample outputs, the child ACL has only an IP phone ACE expanded. No feature
(dot1x, Mac-auth, LPIP, Webauth) is enabled on the port.
Command
set security acl ip test include downloaded-acl feature
Chapter 15 Configuring Access Control
OL-8978-04