Access Control
Configuring MAC-based ACLs
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 236
17
Modifying ACLs Workflow
An ACL can only be modified if it is not in use. The following describes the process
of unbinding an ACL in order to modify it:
• If the ACL does not belong to a class map (in QoS advanced mode), but it has
been associated with an interface, unbind it from the interface on the ACL
Binding page. See Configuring ACL Binding for more details.
• If the ACL is part of the class map and not bound to an interface, then it can
be modified.
• If the ACL is part of a class map contained in a policy bound to an interface,
you must perform the chain of unbinding as follows:
- Unbind the policy containing the class map from the interface on the
Policy Binding page. See Configuring Policy Binding for more details.
- Delete the class map containing the ACL from the policy. See
Configuring QoS Policies for more details.
- Delete the class map containing the ACL. See Configuring Class
Mapping for more details.
Configuring MAC-based ACLs
MAC-based ACLs are used to filter traffic based on Layer 2 fields. MAC-based
ACLs check all frames for a match.
MAC-based ACLs are defined on the MAC-Based ACL page. The rules are
defined on the MAC-Based ACE page.
To define a MAC-based ACL:
STEP 1 Click Access Control > MAC-Based ACL.
The MAC-Based ACL Table displays all currently defined MAC-based ACLs.
STEP 2 To add a new MAC-based ACL, click Add.
STEP 3 Enter the name of the new ACL in the ACL Name field. ACL names are
case-sensitive.
STEP 4 Click Apply. The MAC-based ACL is added, and the Running Configuration is
updated.
To Next Page
Loading...
Need help?
General
