Cisco IE 4000 Software Configuration Guide

569
Configuring Network Security with ACLs
Additional References
Switch # show access-lists
Extended MAC access list mac1
10 deny any any decnet-iv
20 permit any any
This example shows how to apply MAC access list mac1 to a port to filter packets entering the port:
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# mac access-group mac1 in
Note: The mac access-group interface configuration command is only valid when applied to a physical Layer 2
interface.You cannot use the command on EtherChannel port channels.
After receiving a packet, the switch checks it against the inbound ACL. If the ACL permits it, the switch continues to
process the packet. If the ACL rejects the packet, the switch discards it. When you apply an undefined ACL to an
interface, the switch acts as if the ACL has not been applied and permits all packets. Remember this behavior if you use
undefined ACLs for network security.
Additional References
The following sections provide references related to switch administration:

Cisco IE 4000 Specifications

General

Product Type	Switch
Form Factor	DIN Rail Mountable
MAC Address Table Size	8000
Jumbo Frame Support	9216 bytes
Operating Temperature	-40°C to 70°C
Mean Time Between Failures (MTBF)	Over 500, 000 hours
Memory	256 MB DRAM
Mounting	DIN Rail, Wall
Certifications	EN 50121-4
Ports	8 x 10/100Base-TX Ethernet Ports