DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Identifies a specific interface for configuration, and enter
interface configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet1/0/1
Step 2
The interface can be a Layer 2 interface (port ACL), or a
Layer 3 interface (router ACL).
Controls access to the specified interface.
ip access-group {access-list-number | name} {in | out}
Step 3
Example:
Switch(config-if)# ip access-group 2 in
The out keyword is not supported for Layer 2 interfaces
(port ACLs).
Returns to privileged EXEC mode.end
Example:
Switch(config-if)# end
Step 4
Displays the access list configuration.show running-config
Example:
Switch# show running-config
Step 5
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 6
Monitoring IPv4 ACLs
You can monitor IPv4 ACLs by displaying the ACLs that are configured on the switch, and displaying the
ACLs that have been applied to interfaces and VLANs.
When you use the ip access-group interface configuration command to apply ACLs to a Layer 2 or 3 interface,
you can display the access groups on the interface. You can also display the MAC ACLs applied to a Layer
2 interface. You can use the privileged EXEC commands as described in this table to display this information.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1204
Monitoring IPv4 ACLs