Applying ACL Policies

A policy intended to be used as an ACL (Access Control List) is applied to an interface, and the CLI command option is named aclname.

Supply the policy name in place of the aclname option.

To apply an ACL policy, enter the command:
configure access-list aclname [any | ports port_list ] {ingress | egress}

When you use the any keyword, the ACL is applied to all the interfaces and is referred to as the wildcard ACL. This ACL is evaluated for any ports without specific ACLs, and it is also applied to any packets that do not match the specific ACLs applied to the interfaces.

When an ACL is already configured on an interface, the command is rejected and an error message is displayed.
To remove an ACL from an interface, enter the command:
unconfigure access-list policy_name {any | ports port_list } {ingress | egress}
To display the interfaces that have ACLs configured and the ACL that is configured on each. enter the command:
show access-list {any | ports port_list } {ingress | egress}

Published March 2020prev | next