Contents
53
Software Configuration GuideāRelease IOS XE 3.9.xE and IOS 15.2(5)Ex
Troubleshooting High CPU Due to ACLs 62-7
Selecting Mode of Capturing Control Packets 62-7
Guidelines and Restrictions 62-8
Selecting Control Packet Capture 62-9
TCAM Programming and ACLs 62-10
Layer 4 Operators in ACLs 62-10
Restrictions for Layer 4 Operations 62-11
Configuration Guidelines for Layer 4 Operations 62-12
Using ACLs to Filter TCP Flags and How ACL Processing Impacts CPU 62-13
Configuring Unicast MAC Address Filtering 62-16
Configuring Named MAC Extended ACLs 62-16
Configuring EtherType Matching 62-17
Configuring Named IPv6 ACLs 62-18
Applying IPv6 ACLs to Layer 2 and 3 Interface 62-20
Configuring VLAN Maps 62-21
VLAN Map Configuration Guidelines 62-22
Creating and Deleting VLAN Maps 62-22
Examples of ACLs and VLAN Maps 62-23
Applying a VLAN Map to a VLAN 62-25
Using VLAN Maps in Your Network 62-25
Denying Access to a Server on Another VLAN 62-27
Displaying VLAN Access Map Information 62-28
Using VLAN Maps with Router ACLs 62-28
Guidelines for Using Router ACLs and VLAN Maps on the Same VLAN 62-29
Examples of Router ACLs and VLAN Maps Applied to VLANs 62-29
ACLs and Switched Packets 62-29
ACLs and Routed Packets 62-30
Configuring PACLs 62-31
Creating a PACL 62-31
PACL Configuration Guidelines 62-32
Removing the Requirement for a Port ACL 62-32
Configuration Restrictions 62-33
Debugging Considerations 62-33
Webauth Fallback 62-33
Configuring IPv4, IPv6, and MAC ACLs on a Layer 2 Interface 62-33
Using PACL with Access-Group Mode 62-34
Configuring Access-group Mode on Layer 2 Interface 62-35
Applying ACLs to a Layer 2 Interface 62-35