Table of Contents
Advertisement
Chapter 16
Configuring Access Control
Figure 16-4 Wiring Closet Configuration
VACL: deny http
from X to Y
http is dropped
at entry point
Redirecting Broadcast Traffic to a Specific Server Port
Some application traffic uses broadcast packets that reach every host in a VLAN. With VACLs, you can
redirect these broadcast packets to the intended application server port.
Figure 16-5
server port and preventing other ports from receiving the packet.
To redirect broadcast traffic to a specific server port, perform this task in privileged mode (TCP
port 5000 is the intended server application port):
Task
Step 1
Redirect the broadcast packets.
Step 2
Permit all other traffic.
Step 3
Commit the VACL.
Step 4
Map the VACL to VLAN 10.
You could apply the same concept to direct broadcast traffic to a multicast destination by redirecting
Note
the traffic to a group of ports (see
78-13315-02
Catalyst 6500 series switches
with MSFC
Switch A
with PFC only
Host X
VLAN 1
VLAN 2
Packet
shows an application broadcast packet from Host A being redirected to the target application
Command
set security acl ip SERVER redirect 4/1 tcp any host
255.255.255.255 eq 5000
set security acl ip SERVER permit ip any any
commit security acl SERVER
set security acl map SERVER 10
Figure
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
Switch C
with PFC only
Host Y
16-5).
Using VACLs in your Network
16-23
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
