Name: Cisco Catalyst 3750-E
Brand: Cisco
Rating: 4 (1 reviews)

To Next Page

To Previous Page

CHAPTER

35-1

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

OL-9775-08

Configuring Network Security with ACLs

This chapter describes how to configure network security on the Catalyst 3750-E or 3560-E switch by

using access control lists (ACLs), which in commands and tables are also referred to as access lists.

Unless otherwise noted, the term switch refers to a Catalyst 3750-E or 3560-E standalone switch and to

a Catalyst 3750-E switch stack.

Note Information in this chapter about IP ACLs is specific to IP Version 4 (IPv4). For information about IPv6

ACLs, see Chapter 36, “Configuring IPv6 ACLs.”

For complete syntax and usage information for the commands used in this chapter, see the command

ference for this release, see the “Configuring IP Services” section in the “IP Addressing and Services”

chapter of the Cisco IOS IP Configuration Guide, Release 12.2, and the Cisco IOS IP Command

Reference, Volume 1 of 3: Addressing and Services, Release 12.2.

Catalyst 3750-E and 3560-E switches also support Cisco TrustSec Security Group Tag (SCT) Exchange

Prot

ocol (SXP). This feature supports security group access control lists (SGACLs), which define ACL

policies for a group of devices instead of an IP address. The SXP control protocol allows tagging packets

with SCTs without a hardware upgrade, and runs between access layer devices at the Cisco TrustSec

domain edge and distribution layer devices within the Cisco TrustSec domain. Catalyst 3750-E and

3560-E switches operate as access layer switches in the Cisco TrustSec network.

For more information about Cisco TrustSec, see the “Cisco TrustSec Switch Configuration Guide” at this

http://www.cisco.com/en/US/docs/switches/lan/trustsec/configuration/guide/trustsec.html

The sections on SXP define the capabilities supported on the Catalyst 3750-E and 3560-E switches.

This chapter consists of these sections:

• Understanding ACLs, page 35-2

• Configuring IPv4 ACLs, page 35-7

• Creating Named MAC Extended ACLs, page 35-28

• Configuring VLAN Maps, page 35-31

• Using VLAN Maps with Router ACLs, page 35-37

• Displaying IPv4 ACL Configuration, page 35-41

Other manuals for Cisco Catalyst 3750-E

Questions and Answers:

Need help?

Do you have a question about the Cisco Catalyst 3750-E and is the answer not in the manual?

General