Cisco WS-C6506 - Page 471

15-75
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 15 Configuring Access Control
Configuring Port-Based ACLs
Console> (enable) set port security-acl 3/1 vlan-based
ACL interface is set to vlan-based mode for port(s) 3/1.
Console> (enable) set security acl map ipacl1 3/1
Port 3/1 is set to vlan-based mode, config is saved in Nvram.
Config will be applied when the port is set to port-based/merge mode.
Console> (enable)
Displaying ACL Mapping Information
The show security acl map command is extended to display the port mappings as follows:
• Added mandatory keywords (config and runtime) to display the configuration and run-time
mappings.
• Added optional keywords (all-vlans and all-ports) to selectively display the configured VACLs and
PACLs.
To display the ACL mapping information, perform this task in normal mode:
These examples show how to display the ACL mapping information:
Console> (enable) show security acl map config all
ACL Name Type Ports/Vlans
-------------------------------- ---- --------------
ipacl1 IP 11
ipacl2 IP 3/1
Console> (enable) show security acl map config all-ports
ACL Name Type Ports
-------------------------------- ---- --------------
ipacl2 IP 3/1
Console> (enable) show security acl map runtime 3/1
Port ACL name Type
----- -------------------------------- ----
3 / 1 ipacl1 IP
Console> (enable)
Displaying ACL Information for an EtherChannel
The show port channel command is extended to display the PACL mappings on the port channels. For
type, you can specify security-acl.
To display the ACL information for an EtherChannel, perform this task in normal mode:
Task Command
Display the ACL mapping information. show security acl map [config | runtime] [acl_name |
mod_num/port_num | vlan | all | all-vlans | all-ports]
Task Command
Display the ACL information for an
EtherChannel.
show port channel [all | mod[/port]] {info [type]}