Contents
xl
Software Configuration GuideāRelease IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Displaying a Binding Table 50-19
Displaying the DHCP Snooping Configuration 50-19
About IP Source Guard 50-19
Configuring IP Source Guard 50-20
Configuring IP Source Guard on Private VLANs 50-22
Displaying IP Source Guard Information 50-22
Displaying IP Source Binding Information 50-23
Configuring IP Source Guard for Static Hosts 50-24
About IP Source Guard for Static Hosts 50-24
Configuring IPSG for Static Hosts on a Layer 2 Access Port 50-25
Configuring IPSG for Static Hosts on a PVLAN Host Port 50-28
CHAPTER
51 Configuring Network Security with ACLs 51-1
About ACLs 51-2
Overview 51-2
Supported Features That Use ACLs 51-3
Router ACLs 51-3
Port ACLs 51-4
Dynamic ACLs 51-5
VLAN Maps 51-5
Hardware and Software ACL Support 51-6
Troubleshooting High CPU Due to ACLs 51-6
Selecting Mode of Capturing Control Packets 51-7
Guidelines and Restrictions 51-8
Selecting Control Packet Capture 51-8
TCAM Programming and ACLs 51-10
Layer 4 Operators in ACLs 51-10
Restrictions for Layer 4 Operations 51-10
Configuration Guidelines for Layer 4 Operations 51-11
How ACL Processing Impacts CPU 51-12
Configuring Unicast MAC Address Filtering 51-13
Configuring Named MAC Extended ACLs 51-14
Configuring EtherType Matching 51-15
Configuring Named IPv6 ACLs 51-16
Applying IPv6 ACLs to Layer 2 and 3 Interface 51-17
Configuring VLAN Maps 51-17
VLAN Map Configuration Guidelines 51-18
Creating and Deleting VLAN Maps 51-19