Specifications

2-99
Cisco Catalyst Blade Switch 3020 for HP Command Reference
OL-8916-01
Chapter 2 Cisco Catalyst Blade Switch 3020 for HP Cisco IOS Commands
ip access-group
For standard inbound access lists, after the switch receives a packet, it checks the source address of the
packet against the access list. IP extended access lists can optionally check other fields in the packet,
such as the destination IP address, protocol type, or port numbers. If the access list permits the packet,
the switch continues to process the packet. If the access list denies the packet, the switch discards the
packet.
If the specified access list does not exist, all packets are passed.
Examples This example shows how to apply IP access list 101 to inbound packets on a port:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# ip access-group 101 in
You can verify your settings by entering the show ip interface, show access-lists, or show ip
access-lists privileged EXEC command.
Related Commands Command Description
access list Configures a numbered ACL. For syntax information, select Cisco
IOS IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands
ip access-list Configures a named ACL. For syntax information, select Cisco IOS
IP Command Reference, Volume 1 of 3:Addressing and
Services, Release 12.2 > IP Services Commands.
show access-lists Displays ACLs configured on the switch.
show ip access-lists Displays IP ACLs configured on the switch. For syntax
information, select Cisco IOS IP Command Reference, Volume 1
of 3:Addressing and Services, Release 12.2 > IP Services
Commands.
show ip interface Displays information about interface status and configuration. For
syntax information, select Cisco IOS IP Command Reference,
Volume 1 of 3:Addressing and Services, Release 12.2 > IP
Services Commands.