CHAPTER
34-1
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
34
Understanding Cisco IOS ACL Support
This chapter describes Cisco IOS ACL support on the Cisco 7600 series routers:
• Cisco IOS ACL Configuration Guidelines and Restrictions, page 34-1
• Hardware and Software ACL Support, page 34-2
• Configuring IPv6 Address Compression, page 34-3
• Optimized ACL Logging with a PFC3, page 34-5
• Guidelines and Restrictions for Using Layer 4 Operators in ACLs, page 34-7
Note For complete information about configuring Cisco IOS ACLs, see the Cisco IOS Security Configuration
Guide, Release 12.2, “Traffic Filtering and Firewalls,” at this URL:
http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_accs_list_rmap_ps6017_TS
D_Products_Configuration_Guide_Chapter.html
Tip For additional information (including configuration examples and troubleshooting information), see the
documents listed on this page:
http://www.cisco.com/en/US/products/hw/routers/ps368/tsd_products_support_series_home.html
Cisco IOS ACL Configuration Guidelines and Restrictions
The following guidelines and restrictions apply to Cisco IOS ACL configurations:
• You can apply Cisco IOS ACLs directly to Layer 3 ports and to VLAN interfaces.
• You can apply VLAN ACLs (VACLs) to VLANs (refer to Chapter 35, “Configuring VLAN ACLs”).
• Each type of ACL (IP, IPX, and MAC) filters only traffic of the corresponding type. A Cisco IOS
MAC ACL never matches IP or IPX traffic.
• The PFC does not provide hardware support for Cisco IOS IPX ACLs. Cisco IOS IPX ACLs are
supported in software on the MSFC.
• By default, the MSFC sends Internet Control Message Protocol (ICMP) unreachable messages when
a packet is denied by an access group.
To Next Page
Loading...
Need help?
General
