Cisco 4500M User Manual

35-26
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Chapter 35 Configuring Network Security with ACLs
Using PACL with VLAN Maps and Router ACLs
This example shows that the IP access group simple-ip-acl is configured on the inbound direction of
interface fa6/1:
Switch# show ip interface fast 6/1
FastEthernet6/1 is up, line protocol is up
Inbound access list is simple-ip-acl
Outgoing access list is not set
This example shows that MAC access group simple-mac-acl is configured on the inbound direction of
interface fa6/1:
Switch# show mac access-group interface fast 6/1
Interface FastEthernet6/1:
Inbound access-list is simple-mac-acl
Outbound access-list is not set
This example shows that access group merge is configured on interface fa6/1:
Switch# show access-group mode interface fast 6/1
Interface FastEthernet6/1:
Access group mode is: merge
Using PACL with VLAN Maps and Router ACLs
For output PACLs, there is no interaction with VACL or output Router ACLs. (See the restrictions listed
in the “PACL Configuration Guidelines” section on page 35-23.) For input PACLs, however, the
interaction with Router ACLs and VACLs depends on the interface access group mode as shown in
Table 35-1.
Each ACL Type listed in Table 35-1 is synonymous with a different scenario, as explained in the
following discussion.
Table 35-1 Interaction Between PACLs, VACLs and Router ACLs
ACL Type(s) Input PACL
prefer port
mode
prefer vlan
mode
merge mode
1. Input Router ACL PACL applied Input Router
ACL applied
PACL, Input Router ACL (merged)
applied in order (ingress)
2. VACL PACL applied VACL
applied
PACL, VACL (merged) applied in order
(ingress)
3. VACL + Input Router
ACL
PAC L applied VAC L +
Input Router
ACL applied
PACL, VACL, Input Router ACL
(merged) applied in order (ingress)

Cisco 4500M Specifications

General

Brand	Cisco
Model	4500M
Category	Network Router
Language	English