Layer 4 Operations Configuration Guidelines - Cisco WS-C6506 Software Manual

Chapter 15 Configuring Access Control
Example 3
******** VACL
1
2
3
4
5
6
7
8
9
10 permit ip any any
******** Cisco IOS ACL **********
1
2
******** MERGE **********
Using the new algorithm - 12 entries
Using the old algorithm - 303 entries
Example 4
******** VACL
1 redirect 4/25 tcp host 192.168.1.67 host 255.255.255.255
2 redirect 4/25 udp host 192.168.1.67 host 255.255.255.255
3 deny tcp any any lt 30
4 deny udp any any lt 30
5 permit ip any any
*******
1
2
*******
Using the new algorithm - 6 entries
Using the old algorithm - 142 entries
Example 5
******** VACL
1 redirect 4/25 tcp host 192.168.1.67 host 255.255.255.255
2 redirect 4/25 udp host 192.168.1.67 host 255.255.255.255
3 permit ip any any
*******
1
2
*******
Using the new algorithm - 4 entries
Using the old algorithm - 4 entries

Layer 4 Operations Configuration Guidelines

These sections provide the guidelines for using Layer 4 port operations:
•
•
OL-8978-04
***********
deny ip 0.0.0.0 255.255.255.0 any
deny ip 0.0.0.255 255.255.255.0 any
deny ip any 0.0.0.0 255.255.255.0
permit ip any host 239.255.255.255
permit ip any host 255.255.255.255
deny ip any 0.0.0.255 255.255.255.0
permit tcp any range 0 65534 any range 0 65534
permit udp any range 0 65534 any range 0 65534
permit icmp any any
deny ip any host 239.255.255.255
permit ip any any
***********
Cisco IOS ACL ***********
deny ip any host 239.255.255.255
permit ip any any
MERGE **********
***********
Cisco IOS ACL ***********
deny ip any host 239.255.255.255
permit ip any any
MERGE **********
Determining Layer 4 Operation Usage, page 15-24
Determining Logical Operation Unit Usage, page 15-24
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Using VACLs with Cisco IOS ACLs
15-23