Cisco Catalyst 4500 Series Configuration Manual page 1249
Release ios xe 3.3.0sg and ios 15.1(1)sg
Hide thumbs
Also See for Catalyst 4500 Series:
- Software configuration manual (2086 pages) ,
- Administration manual (1814 pages) ,
- Configuration manual (1254 pages)
Table of Contents
Advertisement
Chapter 51
Configuring Network Security with ACLs
Table 51-1
ACL Type(s)
1.
Input Router ACL
2.
VACL
VACL + Input Router
3.
ACL
Each ACL type listed in
Scenario 1: Host A is connected to an interface in VLAN 20, which has an SVI configured. The interface
has input PACL configured, and the SVI has input Router ACL configured as shown in
Figure 51-7 Scenario 1: PACL Interaction with an Input Router ACL
Host A
(VLAN 10)
If the interface access group mode is prefer port, then only the input PACL is applied on the ingress
traffic from Host A. If the mode is prefer VLAN, then only the input Router ACL is applied to ingress
traffic from Host A that requires routing. If the mode is merge, then the input PACL is first applied to
the ingress traffic from Host A, and the input Router ACL is applied on the traffic that requires routing.
Scenario 2: Host A is connected to an interface in VLAN 10, which has a VACL (VLAN Map)
configured and an input PACL configured as shown in
OL-25340-01
Interaction between PACLs, VACLs, and Router ACLs
Input PACL
prefer port
mode
PACL applied
PACL applied
PACL applied
Table 51-1
Input
PACL
Frame
VLAN 10
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
prefer vlan
mode
Input Router
ACL applied
VACL
applied
VACL +
Input Router
ACL applied
corresponds with these scenarios:
Catalyst 4500 series switch
Input
router
ACL
Routing function
Packet
Figure
Using PACL with VLAN Maps and Router ACLs
merge mode
PACL, Input Router ACL (merged)
applied in order (ingress)
PACL, VACL (merged) applied in order
(ingress)
PACL, VACL, Input Router ACL
(merged) applied in order (ingress)
Output
PACL
Host B
(VLAN 20)
VLAN 20
51-8:
Figure
51-7:
51-33
- Quick Links:
- Resetting a Switch to Factory Default...
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
