Cisco Systems EA6500 Manual De Usuario
23-11
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
78-14099-04
Chapter 23 Configuring Network Security
Configuring VLAN ACLs
Multicast Packets
shows how ACLs are applied on packets that need multicast expansion. For packets that
need multicast expansion, the ACLs are applied in the following order:
1.
Packets that need multicast expansion:
a.
VACL for input VLAN
b.
Input Cisco IOS ACL
2.
Packets after multicast expansion:
a.
Output Cisco IOS ACL
b.
VACL for output VLAN (not supported with PFC2)
3.
Packets originating from router—VACL for output VLAN
Figure 23-3 Applying VACLs on Multicast Packets
Configuring VACLs
These sections describe configuring VACLs:
•
•
•
•
•
•
Catalyst 6500 Series Switch
with MSFC
Host B
(VLAN 20)
Host D
(VLAN 20)
Host A
(VLAN 10)
Host C
(VLAN 10)
26965
Bridged
Bridged
VACL
VACL (Not supported
on PFC2)
on PFC2)
Input IOS ACL
Output IOS ACL
Routed
MSFC
IOS ACL for
output VLAN
for packets
originating from
router
output VLAN
for packets
originating from
router