Filter
Top Products
33-22
Software Configuration Guide—Release 12.2(25)SG
OL-7659-03
Chapter 33 Configuring Network Security with ACLs
Configuring PACLs
Figure 33-6 Applying ACLs on Routed Packets
Configuring PACLs
This section describes how to configure PACLs, which are used to control filtering on Layer 2 interfaces.
PACLs can filter traffic to or from Layer 2 interfaces based on Layer 3 information, Layer 4 head
information or non-IP Layer 2 information.
This section contains the following topics:
• Creating a PACL, page 33-22
• PACL Configuration Guidelines, page 33-23
• Configuring IP and MAC ACLs on a Layer 2 Interface, page 33-23
• Using PACL with Access-Group Mode, page 33-24
• Configuring Access-group Mode on Layer 2 Interface, page 33-24
• Applying ACLs to a Layer 2 Interface, page 33-25
• Displaying an ACL Configuration on a Layer 2 Interface, page 33-25
Creating a PACL
To create a PACL and apply it to one or more interfaces, perform this task:
Step 1 Create the standard or extended IP ACLs or named MAC extended ACLs that you want to apply to the
interface.
Step 2 Use the ip access-group or mac access-group interface command to apply a IP ACL or MAC ACL to
one or more Layer 2 interfaces.
Frame
Routing function
VLAN 10
Host A
(VLAN 10)
Packet
94157
Catalyst 4500 series switch
VLAN 20
Host B
(VLAN 20)
VLAN 10
map
Input
router
ACL
Output
router
ACL
VLAN 20
map