25-7
Catalyst 3750 MetroSwitch Software Configuration Guide
78-15870-01
Chapter 25 Configuring Network Security with ACLs
Configuring IP ACLs
These sections describe access lists and how to create them:
• Access List Numbers, page 25-7
• Creating a Numbered Standard ACL, page 25-8
• Creating a Numbered Extended ACL, page 25-9
• Creating Named Standard and Extended ACLs, page 25-13
• Using Time Ranges with ACLs, page 25-15
• Including Comments in ACLs, page 25-17
Access List Numbers
The number you use to denote your ACL shows the type of access list that you are creating. Table 25-1
lists the access-list number and corresponding access list type and shows whether or not they are
supported in the switch. The switch supports IP standard and IP extended access lists, numbers 1 to 199
and 1300 to 2699.
Note In addition to numbered standard and extended ACLs, you can also create standard and extended named
IP ACLs using the supported numbers. That is, the name of a standard IP ACL can be 1 to 99; the name
of an extended IP ACL can be 100 to 199. The advantage of using named ACLs instead of numbered lists
is that you can delete individual entries from a named list.
Table 25-1 Access List Numbers
Access List Number Type Supported
1–99 IP standard access list Yes
100–199 IP extended access list Yes
200–299 Protocol type-code access list No
300–399 DECnet access list No
400–499 XNS standard access list No
500–599 XNS extended access list No
600–699 AppleTalk access list No
700–799 48-bit MAC address access list No
800–899 IPX standard access list No
900–999 IPX extended access list No
1000–1099 IPX SAP access list No
1100–1199 Extended 48-bit MAC address access list No
1200–1299 IPX summary address access list No
1300–1999 IP standard access list (expanded range) Yes
2000–2699 IP extended access list (expanded range) Yes
To Next Page
Loading...
