Access Control Lists (ACLs) for the Series 5300xl Switches
Configuring and Assigning an ACL
• Denies IP traffic from the
indicated IP address.
Since, for this example,
ACL 60 is a new list, this
command also creates the
ACL.
• Denies IP traffic from the
indicated IP address.
• Permits IP traffic from all
sources. (Traffic from the
IP sources in the first two
lines is already filtered and
dropped.) The deny any
with which the switch
implicitly concludes all
ACLs is preempted by this
line.
Note: To enable traffic filtering with an ACL assigned to a VLAN such as
the one shown in this example, IP routing must be enabled on the switch.
Otherwise, no ACL filtering will occur.
ACL “60” is listed in the switch configuration.
ACL “60” is assigned to filter inbound traffic
on VLAN 20.
Show config lists any ACLs and ACL
assignments configured in the startup-
config.
Figure 9-12. Example of Configuring a Standard ACL To Deny Inbound Traffic from Specific IP Addresses
9-37
To Next Page
Loading...
Need help?
General