Cisco Catalyst 6500 Series Configuration Manual page 191

Chapter 10 Controlling Network Access with Access Control Lists
You might want to use an outbound ACL to simplify your ACL configuration. For example, if you want
to allow three inside networks on three different interfaces to access each other, you can create a simple
inbound ACL that allows all traffic on each inside interface. (See
Figure 10-4 Inbound ACLs
Permit from
See the following commands for this example:
FWSM/contexta(config)# access-list INSIDE extended permit ip any any
FWSM/contexta(config)# access-group INSIDE in interface inside
FWSM/contexta(config)# access-list HR extended permit ip any any
FWSM/contexta(config)# access-group HR in interface hr
FWSM/contexta(config)# access-list ENG extended permit ip any any
FWSM/contexta(config)# access-group ENG in interface eng
OL-6392-01
FWSM
Inside
ACL Inbound
any to any Permit from
10.1.1.0/24
10.1.2.0/24
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
Web Server:
209.165.200.225
Outside
HR
ACL Inbound
any to any
10.1.3.0/24
Access Control List Overview
Figure 10-4.)
Eng
ACL Inbound
Permit from any to any
10-11