Changing Sequence Numbers in an IP ACL
You can change all the sequence numbers assigned to the rules in an IP ACL.
Procedure
Purpose
Command or Action
Enters global configuration mode.
switch#
configure terminal
Step 1
(Optional)
Displays the IP ACL configuration.
switch#
show
{
ip
|
ipv6
}
access-lists name
Step 2
(Optional)
Copies the running configuration to the startup
configuration.
switch#
copy running-config
startup-config
Step 3
Applying an IP ACL to mgmt0
You can apply an IPv4 or IPv6 ACL to the management interface (mgmt0).
Before You Begin
Ensure that the ACL that you want to apply exists and that it is configured to filter traffic in the manner that
you need for this application.
Procedure
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 1
Applies an IPv4 or IPv6 ACL to the Layer 3
interface for traffic flowing in the direction
ip access-group access-list
{
in
|
out
}
Example:
switch(config-if)#ip access-group acl-120
out
Step 2
specified. You can apply one router ACL per
direction.
(Optional)
Displays the ACL configuration.
show running-config aclmgr
Example:
switch(config-if)# show running-config
aclmgr
Step 3
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
86
Configuring IP ACLs
Changing Sequence Numbers in an IP ACL
