Cisco Systems OL-5650-02 manual Creating an ACL

Chapter 1 Controlling CSS Access

Controlling CSS Network Traffic Through Access Control Lists

Table 1-1 ACL Configuration Quick Start (continued)

Task and Command Example

5.You must repeat steps 1 through 4 to create an ACL with at least one permit clause for all other circuits and apply the ACL to them. If a circuit does not have an applied ACL when you enable ACLs on the CSS, the CSS denies traffic on the circuit.

6.Enable all ACLS on the CSS. Enter the global acl enable command for all ACLs to take effect on all CSS circuit.

Caution Because enabling ACLs globally affects all traffic on all CSS circuits, only permit clauses in an ACL allows traffic through the circuit. If you do not apply an ACL to a circuit, the CSS applies an implicit “deny all” clause to this circuit causing the CSS to deny all traffic on it.

For example, enter:

(config)# acl enable

The following running-config example shows the result of entering the commands in Table 1-1.

!**************************** ACL ****************************

acl 7

clause 10 deny any any destination range 20 23 clause 15 permit any any destination any

apply circuit-(VLAN1)

!************************** GLOBAL ***************************

acl enable

Creating an ACL

ACLs contain clauses to control traffic on CSS circuits. Because all circuits are affected when you globally enable ACLs on the CSS, you must create an ACL for each circuit. You can apply an ACL to more than one circuit. You can also apply an ACL to all circuits on the CSS.

	Cisco Content Services Switch Security Configuration Guide
OL-5650-02		1-17