Cisco Catalyst 2960 Series, Configuration Manual

Page: 1255 / 2288

C H A P T E R
51
Configuring IPv4 Access Control Lists
Access control lists (ACLs) perform packet filtering to control which packets move through the network
and where. Such control provides security by helping to limit network traffic, restrict the access of users and
devices to the network, and prevent traffic from leaving a network. IP access lists can reduce the chance of
spoofing and denial-of-service attacks and allow dynamic, temporary user access through a firewall.
IP access lists can also be used for purposes other than security, such as bandwidth control, restricting the
content of routing updates, redistributing routes, triggering dial-on-demand (DDR) calls, limiting debug
output, and identifying or classifying traffic for quality of service (QoS) features. This module provides an
overview of IP access lists.
• Finding Feature Information, page 1173
• Prerequisites for Configuring IPv4 Access Control Lists, page 1174
• Restrictions for Configuring IPv4 Access Control Lists, page 1174
• Information About Configuring IPv4 Access Control Lists, page 1175
• How to Configure ACLs, page 1183
• Monitoring IPv4 ACLs, page 1204
• Configuration Examples for ACLs, page 1206
• Examples: Troubleshooting ACLs, page 1213
• Additional References, page 1214
• Feature Information for IPv4 Access Control Lists, page 1215
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to
http://www.cisco.com/go/cfn . An account on Cisco.com is not
required.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1173