Chapter 24: Access Control; Access Control Lists - Cisco 300 Series Administration Manual

Managed switch

Hide thumbs Also See for 300 Series:

Table of Contents

Access Control

Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)

The Access Control List (ACL) feature is part of the security mechanism. ACL

definitions serve as one of the mechanisms to define traffic flows that are given a

specific Quality of Service (QoS). For more information see

ACLs enable network managers to define patterns (filter and actions) for ingress

traffic. Packets, entering the device on a port or LAG with an active ACL, are either

admitted or denied entry.

This section contains the following topics:

Access Control Lists

Defining MAC-based ACLs

IPv4-based ACLs

IPv6-Based ACLs

Defining ACL Binding

An Access Control List (ACL) is an ordered list of classification filters and actions.

Each single classification rule, together with its action, is called an Access Control

Element (ACE).

Each ACE is made up of filters that distinguish traffic groups and associated

actions. A single ACL may contain one or more ACEs, which are matched against

the contents of incoming frames. Either a DENY or PERMIT action is applied to

frames whose contents match the filter.

The device supports a maximum of 512 ACLs, and a maximum of 512 ACEs.