Table of Contents
Advertisement
Configuring Port-Based ACLs
Example 6
This example shows that a syslog is generated for any ports that fail to merge with the VACL and these
ports are temporarily placed in VLAN-based mode. The status of the merge is "merge disabled."
Console> (enable) show port security-acl 3/1
Port
----- -------------- -------------- ----------------------
3/1
Config:
Port
----- -------------------------------- ----
3/1
3/1
Runtime:
Port
----- -------------------------------- ----
3/1
3/1
dhcp-snooping:
Port
----- -----------
3/1
Console> (enable) set security acl map ipacl2 5
ACL ipacl2 is successfully mapped to VLAN 5.
2003 Oct 01 20:01:04 %ACL-3-MERGEFAILED:Failed to merge Security ACLs on ports(s) 3/1-4
with VLAN 5
2003 Oct 01 20:01:04 %ACL-3-PACLSMERGEDFORVLAN:Merge completed for all ports on Vlan 5
Console> (enable) show port security-acl 3/1
Port
----- -------------- -------------- ----------------------
3/1
Config:
Port
----- -------------------------------- ----
3/1
3/1
Runtime:
Port
----- -------------------------------- ----
3/1
3/1
dhcp-snooping:
Port
----- -----------
3/1
Console> (enable)
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
15-80
Interface Type Interface Type Interface Merge Status
config
runtime
merge
ACL name
ipacl1
macacl1
ACL name
ipacl1
macacl1
Trust
Source-Guard
------------
untrusted
disabled
Interface Type Interface Type Interface Merge Status
config
runtime
merge
ACL name
ipacl1
macacl1
ACL name
ipacl1
macacl1
Trust
Source-Guard
------------
untrusted
disabled
runtime
merge
(VLAN=5) active
Type
IP
MAC
Type
IP
MAC
Source-Guarded IP Addresses
---------------------------
runtime
merge
(VLAN=5) disabled
Type
IP
MAC
Type
IP
MAC
Source-Guarded IP Addresses
---------------------------
Chapter 15
Configuring Access Control
OL-8978-04
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
