2-101
Cisco Catalyst Blade Switch 3030 Command Reference
78-17262-01
Chapter 2 Cisco Catalyst Blade Switch 3030 Cisco IOS Commands
ip access-group
For standard inbound access lists, after the switch receives a packet, it checks the source address of the
packet against the access list. IP extended access lists can optionally check other fields in the packet,
such as the destination IP address, protocol type, or port numbers. If the access list permits the packet,
the switch continues to process the packet. If the access list denies the packet, the switch discards the
packet.
If the specified access list does not exist, all packets are passed.
Examples
This example shows how to apply IP access list 101 to inbound packets on a port:
Switch(config)#
interface gigabitethernet0/1
Switch(config-if)#
ip access-group 101 in
You can verify your settings by entering the
show ip interface, show access-lists,
or
show ip
access-lists
privileged EXEC command.
Related Commands
Command
Description
access list
Configures a numbered ACL. For syntax information, select
Cisco
IOS IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands
ip access-list
Configures a named ACL. For syntax information, select
Cisco IOS
IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands.
show access-lists
Displays ACLs configured on the switch.
show ip access-lists
Displays IP ACLs configured on the switch. For syntax
information, select
Cisco IOS IP Command Reference, Volume 1
of 3:Addressing and Services, Release 12.2 > IP Services
Commands.
show ip interface
Displays information about interface status and configuration. For
syntax information, select
Cisco IOS IP Command Reference,
Volume 1 of 3:Addressing and Services, Release 12.2 > IP
Services Commands
.