Router ACLs

You can configure a router ACLs for use on a Switch Virtual Interface (SVI), which is the Layer 3 interface to a VLAN; on a physical Layer 3 interface; and on a Layer 3 EtherChannel interface. Just like the ACLs that you would use on a router, router ACLs on a 3550 switch are applied on interfaces for either the inbound or outbound direction.

You are restricted to only applying one IP ACL in each direction, although you can define an ACL to be used with multiple features for a given interface and you can use one feature for multiple ACLs. Be aware though, when you use a single router ACL with multiple features, it is examined multiple times.

The router ACL uses the standard IP ACL for matching the source address and the extended IP ...

Get CCIE Practical Studies: Security (CCIE Self-Study) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.