2-76
Catalyst 2350 Switch Command Reference
OL-19055-01
Chapter 2 Catalyst 2350 Switch Cisco IOS Commands
ip access-group
ip access-group
Use the
ip access-group
interface configuration command to control access to a Layer 2 interface. Use
the
no
form of this command to remove all access groups or the specified access group from the
interface.
ip access-group
{
access-list-number
|
name
} {
in
}
no ip access-group
[
access-list-number
|
name
] {
in
}
Syntax Description
Defaults
No access list is applied to the interface.
Command Modes
Interface configuration
Command History
Usage Guidelines
You can apply named or numbered standard or extended IP access lists to an interface. To define an
access list by name, use the
ip access-list
global configuration command. To define a numbered access
list, use the
access list
global configuration command. You can used numbered standard access lists
ranging from 1 to 99 and 1300 to 1999 or extended access lists ranging from 100 to 199 and 2000
to 2699.
These are limitations for applying an access list to Layer 2 interfaces (port ACLs):
•
You can only apply ACLs in the inbound direction; the
out
keyword is not supported for Layer 2
interfaces.
•
You can only apply one IP ACL per interface.
•
Layer 2 interfaces Port ACLs do not support logging; if the
log
keyword is specified in the IP ACL,
it is ignored.
•
An IP ACL applied to a Layer 2 interface only filters IP packets.
For standard inbound access lists, after the switch receives a packet, it checks the source address of the
packet against the access list. IP extended access lists can optionally check other fields in the packet,
such as the destination IP address, protocol type, or port numbers. If the access list permits the packet,
the switch continues to process the packet. If the access list denies the packet, the switch discards the
packet. If the specified access list does not exist, all packets are passed.
access-list-number
The number of the IP access control list (ACL). The range is 1 to 199 or
1300 to 2699.
name
The name of an IP ACL, specified in the
ip access-list
global configuration
command.
in
Specify filtering on inbound packets.
Release
Modification
12.2(46)EY
This command was introduced.
Содержание Catalyst 2350
Страница 14: ...Contents xiv Catalyst 2350 Switch Command Reference OL 19055 01 ...
Страница 18: ...xviii Catalyst 2350 Switch Command Reference OL 19055 01 Preface ...
Страница 606: ...B 66 Catalyst 2350 Switch Command Reference OL 19055 01 Appendix B Catalyst 2350 Debug Commands debug vqpc ...
Страница 636: ...D 2 Catalyst 2350 Switch Command Reference OL 19055 01 Appendix D Acknowledgments for Open Source Software ...
Страница 652: ...Index IN 16 Catalyst 2350 Switch Command Reference OL 19055 01 ...
