Access Control Lists (ACLs) for the Series 3400cl and Series 6400cl Switches
Configuring and Assigning an ACL
Example of an Extended ACL. Suppose that you want to implement these
policies on ports 1, 2, and 3:
A. Permit Telnet traffic from 10.10.10.44 inbound on port 1 to 10.10.20.78,
deny all other inbound IP traffic from network 10.10.10.0 (VLAN 10) to
10.10.20.0 (VLAN 20), and permit all other IP traffic from any source to
any destination. (See “A” in figure
10-17, below.)
B. Permit FTP traffic from IP address 10.10.20.100 on port 2 to 10.10.30.55.
Deny FTP traffic from other hosts on network10.10.20.0 to any destina-
tion, but permit all other traffic.
VLAN 10
10.10.10.1
VLAN 20
10.10.20.1
VLAN 30
10.10.30.1
1
3
2
3400cl or 6400cl
Switch
10.10.10.0
10.10.20.0
10.10.30.0
A
B
Figure 10-17. Example of an Extended ACL
10-52