Access-Group Mode - Cisco Catalyst 4500 Series Command Reference Manual

access-group mode

access-group mode
To specify the override modes (for example, VACL overrides PACL) and the non-override modes (for
example, merge or strict mode), use the access-group mode command. To return to preferred port mode,
use the no form of this command.
Syntax Description
prefer port
prefer vlan
merge
Defaults
PACL override mode
Command Modes
Interface configuration mode
Command History Release
12.1(19)EW
Usage Guidelines
On the Layer 2 interface, prefer port, prefer VLAN, and merge modes are supported. A Layer 2 interface
can have one IP ACL applied in either direction (one inbound and one outbound).
Examples
This example shows how to make the PACL mode on the switch take effect:
(config-if)# access-group mode prefer port
This example shows how to merge applicable ACL features:
(config-if)# access-group mode merge
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
2-6
access-group mode {prefer {port | vlan} | merge}
no access-group mode {prefer {port | vlan} | merge}
Specifies that the PACL mode take precedence if PACLs are configured. If no
PACL features are configured on the port, other features applicable to the
interface are merged and applied on the interface.
Specifies that the VLAN-based ACL mode take precedence. If no VLAN-based
ACL features are configured on the port's VLAN, the PACL features on the port
are applied.
Merges applicable ACL features before they are programmed into the hardware.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
OL-27596 -01