Cisco Catalyst 4500 Series Command Reference Guide

2-251
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
epm access control
epm access control
To configure access control, use the epm access control [open | default] command.
epm access control [open | default]
Syntax Description
Defaults If the epm access control command is not configured, the behavior defaults to the epm access control
default command. Nothing is nvgened.
Command Modes Configuration mode
Command History
Usage Guidelines When you enter the epm access control command, it is nvgen’d.
If no ACLs are downloaded from the ACS server when a host is authenticated, the host is restricted by
the port ACLs and do not receive additional permissions. In such a scenario, if you enter the epm access
control open command, a permit ip host any entry is created for the host after authentication. This entry
is created only if no ACLs are downloaded from the ACS.
The epm access control open command is particularly useful in authentication open mode. Traffic from
a host is allowed to pass even before the host is authenticated. This traffic is restricted by the port ACL.
In such a scenario, if no ACLs are downloaded from the ACS, the host will not receive any additional
permissions. Even after authentication, the host is still restricted by the port ACL. If epm access control
open is configured, complete access is granted upon authentication.
If epm access control default is configured and no ACL is downloaded, port ACL is the only ACL on
the port. This is how access control functioned prior to Cisco IOS Release 12.2(54)SG.
Examples The following example shows how to enable open access control:
Switch(config)# epm access control open
The following example shows how to enable default access control:
Switch(config)# epm access control default
Related Commands
open Specifies open access control.
default Specifies default access control.
Release Modification
12.2(54)SG This command was introduced on the Catalyst 4500 series switch.
Command Description
show ipv6 snooping counters Displays the number of packets dropped per port due to RA
Guard.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E