Cisco Catalyst 3560-X Software Configuration Manual page 869

Hide thumbs Also See for Catalyst 3560-X:

Table of Contents

Configuring Network Security with ACLs

This chapter describes how to configure network security on the Catalyst 3750-X or 3560-X switch by

using access control lists (ACLs), which in commands and tables are also referred to as access

lists.Unless otherwise noted, the term switch refers to a Catalyst 3750-X or 3560-X standalone switch

and to a Catalyst 3750-X switch stack.

Information in this chapter about IP ACLs is specific to IP Version 4 (IPv4). For information about IPv6

For complete syntax and usage information for the commands used in this chapter, see the command

reference for this release, see the "Configuring IP Services" section in the "IP Addressing and Services"

chapter of the Cisco IOS IP Configuration Guide, Release 12.4, and the Cisco IOS IP Command

Reference, Volume 1 of 3: Addressing and Services, Release 12.4.

Catalyst 3750-X and 3560-X switches running the IP base or IP services feature set also support Cisco

TrustSec Security Group Tag (SCT) Exchange Protocol (SXP). This feature supports security group

access control lists (SGACLs), which define ACL policies for a group of devices instead of an IP

address. The SXP control protocol allows tagging packets with SCTs without a hardware upgrade, and

runs between access layer devices at the Cisco TrustSec domain edge and distribution layer devices

within the Cisco TrustSec domain. Catalyst 3750-X and 3560-X switches operate as access layer

switches in the Cisco TrustSec network.

For more information about Cisco TrustSec, see the "Cisco TrustSec Switch Configuration Guide" at this

http://www.cisco.com/en/US/docs/switches/lan/trustsec/configuration/guide/trustsec.html

The sections on SXP define the capabilities supported on the Catalyst 3750-X and 3560-X switches.

On switches running the LAN base feature set, router ACLs are supported only on switch virtual

interfaces (SVIs). VLAN maps are not supported.

This chapter consists of these sections:

Understanding ACLs, page 1-2

Configuring IPv4 ACLs, page 1-7

Creating Named MAC Extended ACLs, page 1-29

Configuring VLAN Maps, page 1-32

Chapter 1, "Configuring IPv6 ACLs."

C H A P T E R

Catalyst 3750-X and 3560-X Switch Software Configuration Guide

Troubleshooting

Catalyst 3750-x