HP Cisco Catalyst Blade Switch 3020 Cisco Catalyst Blade Switch 3020 for HP Co - Page 127

Chapter 2 Cisco Catalyst Blade Switch 3020 for HP Cisco IOS Commands ip access-group For standard inbound access lists, after the switch receives a packet, it checks the source address of the packet against the access list. IP extended access lists can optionally check other fields in the packet, such as the destination IP address, protocol type, or port numbers. If the access list permits the packet, the switch continues to process the packet. If the access list denies the packet, the switch discards the packet. If the specified access list does not exist, all packets are passed. Examples This example shows how to apply IP access list 101 to inbound packets on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# ip access-group 101 in You can verify your settings by entering the show ip interface, show access-lists, or show ip access-lists privileged EXEC command. Related Commands Command access list ip access-list show access-lists show ip access-lists show ip interface Description Configures a numbered ACL. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands Configures a named ACL. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. Displays ACLs configured on the switch. Displays IP ACLs configured on the switch. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. Displays information about interface status and configuration. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. OL-8916-01 Cisco Catalyst Blade Switch 3020 for HP Command Reference 2-99