Configuration Guide Configuring ACL
For details about how to add ACEs to an ACL, see the earlier descriptions about the IP ACL, MAC extended ACL, expert
extended ACL, or IPv6 ACL.
Configuring a Security Channel on an Interface
security access-group {acl-id | acl-name }
acl-id: Indicates that ID of the ACL that is configured as the security channel.
acl-name: Indicates that name of the ACL that is configured as the security channel.
Interface configuration mode
Run this command to configure a specified ACL as the security channel on the specified interface.
Configuring a Global Security Channel
security global access-group {acl-id | acl-name }
acl-id: Indicates that ID of the ACL that is configured as the security channel.
acl-name: Indicates that name of the ACL that is configured as the security channel.
Global configuration mode
Run this command to configure the specified ACL as the global security channel.
Configuring an Exclusive Interface for the Global Security Channel
Interface configuration mode
Run this command to configure the specified interface as the exclusive interface of the global security
channel.
Configuration Example
The following configuration example describes only ACL-related configurations.
Enabling DOT1X Authentication and Configuring a Security Channel to Allow Users to Download the SU
Software From the Server Before Authentication