Cisco WS-C6506 - Page 474

15-78
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 15 Configuring Access Control
Configuring Port-Based ACLs
Example 3
This example shows a port that is configured in merge mode but the port has not been mapped to an ACL:
Console> (enable) set port security-acl 3/1 merge
ACL interface is set to merge mode for port(s) 3/1.
Console> (enable) show port security-acl 3/1
Port Interface Type Interface Type Interface Merge Status
config runtime runtime
----- -------------- -------------- ----------------------
3/1 merge merge (VLAN 5) inactive
Config:
Port ACL name Type
----- -------------------------------- ----
No ACL is mapped to port 3/1.
Runtime:
Port ACL name Type
----- -------------------------------- ----
No ACL is mapped to port 3/1.
dhcp-snooping:
Port Trust Source-Guard Source-Guarded IP Addresses
----- ----------- ------------ ---------------------------
3/1 untrusted disabled
Console> (enable) set security acl map ipacl1 3/1
ACL ipacl1 is successfully mapped to port(s) 3/1.
Console> (enable) show port security-acl 3/1
Port Interface Type Interface Type Interface Merge Status
config runtime runtime
----- -------------- -------------- ----------------------
3/1 merge merge (VLAN 5) active
Config:
Port ACL name Type
----- -------------------------------- ----
3/1 ipacl1 IP
Runtime:
Port ACL name Type
----- -------------------------------- ----
3/1 ipacl1 IP
dhcp-snooping:
Port Trust Source-Guard Source-Guarded IP Addresses
----- ----------- ------------ ---------------------------
3/1 untrusted disabled
Console> (enable)