Ip Port Access-Group - Cisco Nexus 5500 Series Command Reference Manual
Nx-os security command reference
Hide thumbs
Also See for Nexus 5500 Series:
- Hardware installation manual (142 pages) ,
- Command reference manual (460 pages) ,
- Configuration manual (160 pages)
Table of Contents
Advertisement
ip port access-group
ip port access-group
To apply an IPv4 access control list (ACL) to an interface as a port ACL, use the ip port access-group
command. To remove an IPv4 ACL from an interface, use the no form of this command.
Syntax Description
access-list-name
in
Command Default
None
Command Modes
Interface configuration mode
Virtual Ethernet interface configuration mode
Command History
Release
5.2(1)N1(1)
Usage Guidelines
By default, no IPv4 ACLs are applied to an interface.
You can use the ip port access-group command to apply an IPv4 ACL as a port ACL to the following
interface types:
•
•
•
You can also apply an IPv4 ACL as a VLAN ACL. For more information, see the match command.
The switch applies port ACLs to inbound traffic only. The switch checks inbound packets against the
rules in the ACL. If the first matching rule permits the packet, the switch continues to process the packet.
If the first matching rule denies the packet, the switch drops the packet and returns an ICMP
host-unreachable message.
If you delete the specified ACL from the switch without removing the ACL from an interface, the deleted
ACL does not affect traffic on the interface.
Examples
This example shows how to apply an IPv4 ACL named ip-acl-01 to Ethernet interface 1/2 as a port ACL:
switch(config)# interface ethernet 1/2
switch(config-if)# ip port access-group ip-acl-01 in
This example shows how to remove an IPv4 ACL named ip-acl-01 from Ethernet interface 1/2:
Cisco Nexus 5500 Series NX-OS Security Command Reference
130
ip port access-group access-list-name in
no ip port access-group access-list-name in
Name of the IPv4 ACL, which can be up to 64 alphanumeric, case-sensitive
characters long.
Specifies that the ACL applies to inbound traffic.
Modification
This command was introduced.
Layer 2 Ethernet interfaces
Layer 2 EtherChannel interfaces
Virtual Ethernet interface
Chapter
I Commands
OL-27883-02
- Quick Links:
- Aaa Accounting Default
- Show Ip Arp
Hide quick links:
Advertisement
Table of Contents
