Table of Contents
Advertisement
IP Access Control Lists
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
The terms in, out, source, and destination are used as referenced by the switch.
•
Tip
•
Tip
To apply an IP-ACL to an interface, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# interface mgmt0
switch(config-if)#
Step 3
switch(config-if)# ip access-group restrict_mgmt
switch(config-if)# no ip access-group NotRequired
Step 4
switch(config-if)# ip access-group restrict_mgmt in
switch(config-if)# no ip access-group restrict_mgmt
in
switch(config-if)# ip access-group SampleName2 out
switch(config-if)# no ip access-group SampleName2 out
IP-ACL Configuration Verification
Use the show ip access-list command to view the contents of configured access filters. Each access filter
can have several conditions.
Cisco MDS 9000 Family Configuration Guide
29-8
In—Traffic that arrives at the interface and which will go through the switch; the source is where it
transmitted from and the destination is where it is transmitted to (on the other side of the router).
The IP-ACL applied to the interface for the ingress traffic affects both local and remote traffic.
Out—Traffic that has already been through the switch and is leaving the interface; the source is
where it transmitted from and the destination is where it is transmitted to.
The IP-ACL applied to the interface for the egress traffic only affects local traffic.
Chapter 29
Configuring IP Access Control Lists
Purpose
Enters configuration mode.
Configures a management interface
(mgmt0).
Applies an IP-ACL called
restrict_mgmt for both the ingress and
egress traffic (default).
Removes the IP-ACL called
NotRequired.
Applies an IP-ACL called
restrict_mgmt (if it does not already
exist) for ingress traffic.
Removes the IP-ACL called
restrict_mgmt for ingress traffic.
Applies an IP-ACL called
SampleName (if it does not already
exist) for local egress traffic.
Remove the IP-ACL called
SampleName for local egress traffic.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Advertisement
Table of Contents
