SMC Networks 16 10BASE-T manual Binding a Port to an Access Control List, Binding a Port to an ACL

Access Control Lists 3

CLI – This rule permits packets from any source MAC address to the destination address 00-e0-29-94-34-de where the Ethernet type is 0800.

Console(config-mac-acl)#permit any host 00-e0-29-94-34-de
ethertype 0800	4-94
Console(config-mac-acl)#

Binding a Port to an Access Control List

After configuring Access Control Lists (ACL), you should bind them to the ports that need to filter traffic. You can assign one IP access list to any port, but you can only assign one MAC access list to all the ports on the switch.

Command Attributes

•Port – Fixed port or SFP module. (Range: 1-26)

•IP – Specifies the IP Access List to enable for a port.

•MAC – Specifies the MAC Access List to enable globally.

Web – Click Security, ACL, Port Binding. Mark the Enabled field for the port you want to bind to an ACL, select the required ACL from the drop-down list, then click Apply.

Figure 3-37. Binding a Port to an ACL

CLI – This example assigns an IP and MAC access list to port 1, and an IP access list to port 3.

Console(config)#interface ethernet	1/1	4-104
Console(config-if)#ip access-group	david in	4-90
Console(config-if)#mac access-group jerry in		4-95
Console(config-if)#exit	1/3
Console(config)#interface ethernet
Console(config-if)#ip access-group	david in
Console(config-if)#

3-59