Chapter 15
Configuring Access Control
The feature variable can be one of the following:
•
•
•
•
This example shows how to create a placeholder for a downloaded ACL:
Console> set security acl ip test include downloaded-acl dot1x
Console> Successfully configured placeholder download ACL test. Use
'commit' command to save changes.
Console> show security acl info test
set security acl ip test
--------------------------------------------------
1. permit arp-inspection
2. permit eapoudp
3. include downloaded-acl dot1x
4. permit url-redirect
5. deny ip any any
Creating a Placeholder for an IP Phone
To create a placeholder for an IP phone, perform this task in enable mode:
Task
Create a placeholder for an IP phone.
This example shows how to create a placeholder for an IP phone:
Console> (enable) set security acl ip test include ip-phone
Successfully configured placeholder download ACL test. Use 'commit' command to save
changes.
Displaying Downloaded ACL Information
To display downloaded ACL information, perform this task in enable mode:
Task
Display downloaded ACL information.
This example shows how to display downloaded ACL information:
Console> (enable) show security acl downloaded-acl all
Downloaded ACL Summary:
--------------------------------------------------------------
1.#ACSACL#-IP-test_acl2-44cf4bcd
2.#ACSACL#-IP-lpipacl-44a100c7
OL-8978-04
dot1x
webauth
macauth-bypass
eou
ACL Name
Command
set security acl ip test include ip-phone
Command
show security acl downloaded-acl all
Date/Time
Tue Aug 1 2006, 03:14:54
Tue Aug 1 2006, 03:04:56
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Downloadable ACLs
15-121