ACL Configuring
18.5.2 Configuration Examples
!Create Layer 2 ACL based on digital identification to deny the MAC with ARP address
00:00:00:00:00:01.
Switch#configure terminal
Switch(config)#access-list 200 deny arp ingress 00:00:00:00:00:01 0 egress any
!Create Layer 2 ACL based on name identification to deny the MAC with ARP address
00:00:00:00:00:02.
Switch#configure terminal
Switch(config)#access-list link lnkacl
Switch (config-link-nacl-lnkacl)#deny arp ingress 00:00:00:00:00:02 0 egress any
18.6 Activate ACL
Switch obey the rule of “First enable then active”
Table 18-9 Activate ACL
Enter global configuration mode
access-group [ip-group name|num]
[subitem num] [link-group name|num]
[subitem num]
18.6.1 Configuration Examples
Switches only permit with source IP address 1.1.1.1
!Before configuration
Switch(config)#show access-list config 2000
Standard IP Access List 2000, match-order is config, 2 rule:
0 deny any
1 permit 1.1.1.1 0.0.0.0
!Configuration steps
Switch(config)#access-group ip-group 2000
Activate ACL successfully .
!Before configuration
Switch(config)#show access-list config 2000
Standard IP Access List 1, match-order is auto, 2 rule:
0 permit 1.1.1.1 0.0.0.0
1 deny any