Version
Description
9.10(0.0)
Introduced on the S6100-ON.
9.8(1.0)
Introduced on the Z9100–ON.
9.8(0.0P5)
Introduced on the S4048-ON.
9.8(0.0P2)
Introduced on the S3048-ON.
9.7(0.0)
Introduced on the S6000–ON.
9.2(1.0)
Introduced on the Z9500.
9.0.2.0
Introduced on the S6000.
8.3.19.0
Introduced on the S4820T.
8.3.11.1
Introduced on the Z9000.
8.3.7.0
Introduced on the S4810.
8.1.1.0
Introduced on the E-Series.
7.8.1.0
Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up
to 16 characters long.
7.6.1.0
Introduced on the S-Series.
7.5.1.0
Introduced on the C-Series.
6.2.1.1
Introduced on the E-Series.
Usage Information
You can assign one ingress ACL and one egress ACL to an interface.
NOTE:
If you apply outbound(egress) IP acl on a switch port, the filter applies only for routed traffic
egressing out of that port.
To associate an access-list to a non-default VRF, use the
vrf
attribute of this command. You can use this
command at the interface context (physical/LAG) to apply the access-list to a range of VRFs.
The VRF MODE is not available for the default and management VRFs.
Related Commands
•
— configure a standard ACL.
•
— configure an extended ACL.
ip mirror-access-group
Assign an IP mirror access control to an interface.
Syntax
ip mirror-access-group
access-list-name
{in} [implicit-permit] [vlan
vlan-id
]
[optimized]
To remove an IP mirror-access-group configuration, use the
no ip mirror-access-group
access-list-
name
{in | out} [implicit-permit] [vlan
vlan-id
] [optimized]
command.
Parameters
access-list-name
Enter the name of a configured access list, up to 140 characters.
in
Enter the keyword
in
to apply the ACL to incoming traffic.
Access Control Lists (ACL)
187