Access Control Lists

3-59

3
CLI – This rule permits packets from any source MAC address to the destination
address 00-e0-29-94-34-de where the Ethernet type is 0800.
Binding a Port to an Access Control List
After configuring Access Control Lists (ACL), you should bind them to the ports that
need to filter traffic. You can assign one IP access list to any port, but you can only
assign one MAC access list to all the ports on the switch.
Command Attributes
•Port – Fixed port or SFP module. (Range: 1-26)
•IP – Specifies the IP Access List to en able for a port.
•MAC – Specifies the MAC Access List to enable globally.
Web – Click Security, ACL, Port Binding. Mark the Enabled field for the port you
want to bind to an ACL, select the required ACL from the drop-down list, then click
Apply.
Figure 3-37. Binding a Port to an ACL
CLI – This example assigns an IP and MAC access list to port 1, and an IP access
list to port 3.
Console(config-mac-acl)#permit any host 00-e0-29-94-34-de
ethertype 0800 4-94
Console(config-mac-acl)#
Console(config)#interface ethernet 1/1 4-104
Console(config-if)#ip access-group david in 4-90
Console(config-if)#mac access-group jerry in 4-95
Console(config-if)#exit
Console(config)#interface ethernet 1/3
Console(config-if)#ip access-group david in
Console(config-if)#