Creating Standard And Extended Ipv4 Acls - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Chapter 31
Configuring Network Security with ACLs
Creating Standard and Extended IPv4 ACLs
This section describes IP ACLs. An ACL is a sequential collection of permit and deny conditions. One
by one, the switch tests packets against the conditions in an access list. The first match determines
whether the switch accepts or rejects the packet. Because the switch stops testing after the first match,
the order of the conditions is critical. If no conditions match, the switch denies the packet.
The software supports these types of ACLs or access lists for IPv4:
•
•
These sections describe access lists and how to create them:
•
•
•
•
•
•
•
Access List Numbers
The number you use to denote your ACL shows the type of access list that you are creating.
lists the access-list number and corresponding access list type and shows whether or not they are
supported in the switch. The switch supports IPv4 standard and extended access lists, numbers 1 to 199
and 1300 to 2699.
Table 31-1
Access List Number
1–99
100–199
200–299
300–399
400–499
500–599
600–699
700–799
800–899
900–999
1000–1099
1100–1199
1200–1299
OL-26520-01
Standard IP access lists use source addresses for matching operations.
Extended IP access lists use source and destination addresses for matching operations and optional
protocol-type information for finer granularity of control.
Access List Numbers, page 31-7
Creating a Numbered Standard ACL, page 31-8
Creating a Numbered Extended ACL, page 31-9
Resequencing ACEs in an ACL, page 31-13
Creating Named Standard and Extended ACLs, page 31-13
Using Time Ranges with ACLs, page 31-15
Including Comments in ACLs, page 31-17
Access List Numbers
Type
IP standard access list
IP extended access list
Protocol type-code access list
DECnet access list
XNS standard access list
XNS extended access list
AppleTalk access list
48-bit MAC address access list
IPX standard access list
IPX extended access list
IPX SAP access list
Extended 48-bit MAC address access list
IPX summary address access list
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
Configuring IPv4 ACLs
Table 31-1
Supported
Yes
Yes
No
No
No
No
No
No
No
No
No
No
No
31-7
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
