Restrictions for Configuring Network Security with ACLs 105
Information about Network Security with ACLs 107
ACL Overview 107
Access Control Entries 107
ACL Supported Types 107
Supported ACLs 108
ACL Precedence 108
Port ACLs 109
Router ACLs 110
VLAN Maps 110
ACEs and Fragmented and Unfragmented Traffic 111
Example: ACEs and Fragmented and Unfragmented Traffic 111
ACLs and Switch Stacks 112
Active Switch and ACL Functions 112
Stack Member and ACL Functions 112
Active Switch Failure and ACLs 112
Standard and Extended IPv4 ACLs 113
IPv4 ACL Switch Unsupported Features 113
Access List Numbers 113
Numbered Standard IPv4 ACLs 114
Numbered Extended IPv4 ACLs 114
Named IPv4 ACLs 115
ACL Logging 116
Hardware and Software Treatment of IP ACLs 116
VLAN Map Configuration Guidelines 117
VLAN Maps with Router ACLs 117
VLAN Maps and Router ACL Configuration Guidelines 118
VACL Logging 118
Time Ranges for ACLs 119
IPv4 ACL Interface Considerations 119
How to Configure ACLs 120
Configuring IPv4 ACLs 120
Creating a Numbered Standard ACL 120
Creating a Numbered Extended ACL 122
Creating Named Standard ACLs 125
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
viii OL-29434-01
Contents