Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Configuring and Assigning an ACL
• Permits IP traffic from the
indicated IP address.
Since, for this example,
ACL 50 is a new list, this
command also creates
the ACL.
• Permits IP traffic from the
indicated IP address.
• The deny any that the
switch implicitly includes
in all standard ACLs
denies IP packets from IP
sources not included in
the above three
commands.
show access-list resources shows the per-port
rule and ACL mask usage on port 10 (and all other
ports on the switch.
ACL “50” is listed as assigned to filter inbound
traffic on port 10.
Show config lists any ACLs and ACL
assignments configured in the startup-
config.
Figure 10-15. Example of Configuring a Standard ACL To Permit Only Traffic from Specific IP Addresses
In a situation opposite to the above, suppose that you wanted to deny inbound
IP traffic received on port 20 from 10. 128.93.17 and 10.130.93.25, but permit
all other IP traffic on this VLAN. The next ACL achieves this:
10-46