i
Table of Contents
1 ACL Overview ············································································································································1-1
Introduction to ACL ·································································································································1-1
Introduction······································································································································1-1
Application of ACLs on the Switch ··································································································1-1
Introduction to IPv4 ACL·························································································································1-2
IPv4 ACL Classification ···················································································································1-2
IPv4 ACL Naming····························································································································1-2
IPv4 ACL Match Order ····················································································································1-3
IPv4 ACL Step·································································································································1-4
Effective Period of an IPv4 ACL······································································································1-4
IP Fragments Filtering with IPv4 ACL ·····························································································1-4
Introduction to IPv6 ACL·························································································································1-5
IPv6 ACL Classification ···················································································································1-5
IPv6 ACL Naming····························································································································1-5
IPv6 ACL Match Order ····················································································································1-5
IPv6 ACL Step·································································································································1-6
Effective Period of an IPv6 ACL······································································································1-6
ACL Application·······································································································································1-6
2 IPv4 ACL Configuration ····························································································································2-1
Creating a Time Range···························································································································2-1
Configuration Procedure··················································································································2-1
Configuration Example ····················································································································2-2
Configuring a Basic IPv4 ACL·················································································································2-2
Configuration Prerequisites·············································································································2-2
Configuration Procedure··················································································································2-3
Configuration Example ····················································································································2-3
Configuring an Advanced IPv4 ACL ·······································································································2-4
Configuration Prerequisites·············································································································2-4
Configuration Procedure··················································································································2-4
Configuration Example ····················································································································2-5
Configuring an Ethernet Frame Header ACL··························································································2-6
Configuration Prerequisites·············································································································2-6
Configuration Procedure··················································································································2-6
Configuration Example ····················································································································2-7
Copying an IPv4 ACL······························································································································2-7
Configuration Prerequisites·············································································································2-7
Configuration Procedure··················································································································2-7
Displaying and Maintaining IPv4 ACLs···································································································2-8
IPv4 ACL Configuration Example ···········································································································2-8
Network Requirements····················································································································2-8
Configuration Procedure··················································································································2-9
3 IPv6 ACL Configuration ····························································································································3-1
Creating a Time Range···························································································································3-1