<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:54" />
    <title>Applying an IP-ACL to mgmt0 </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1717;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1104920"> </a><h1 class="pTitle">
Applying an IP-ACL to mgmt0

</h1>
<a name="wp1104921"> </a><p class="pBody">
A system default ACL called mgmt0 exists on the mgmt0 interface. This ACL is not visible to the user, 
so mgmt0 is a reserved ACL name that cannot be used. The mgmt0 ACL blocks most ports and only 
allows access to required ports in compliance to accepted security policies.

</p>
<a name="wp1104922"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1104923"> </a><p class="pBody">
To apply an IP-ACL to an interface, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1104924"> </a><li class="pSmartList1">Expand <b style="font-weight: bold" class="cBold">Switches </b><span style="font-weight: bold">&gt; </span><b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold">, </span>and then select <b style="font-weight: bold" class="cBold">IP ACL</b><span style="font-weight: bold"> </span>in the Physical Attributes pane. 
</li>
<a name="wp1104925"> </a><p class="pListBodyLevel1">
You see the IP-ACL configuration in the Information pane.

</p>
<a name="wp1104927"> </a><li class="pSmartList1">Click the<b class="cBold"> Interfaces</b> tab.
</li>
<a name="wp1104928"> </a><p class="pListBodyLevel1">
You see a list of interfaces and associated IP-ACLs.

</p>
<a name="wp1104930"> </a><li class="pSmartList1">Click <b class="cBold">Create Row</b>.
</li>
<a name="wp1104932"> </a><li class="pSmartList1">(Optional) Remove the switches you do not want to include in the IP-ACL by unchecking the check 
boxes next to the switch addresses.
</li>
<a name="wp1104934"> </a><p class="pListBodyLevel1">
Set the <b class="cBold">interface</b> you want associated with an IPv4-ACL or IPv6-ACL in the Interface field.

</p>
<a name="wp1104936"> </a><li class="pSmartList1">Choose a<span style="font-weight: bold"> </span>ProfileDirection (either<b style="font-weight: bold" class="cBold"> inbound</b><span style="font-weight: bold"> </span>or<span style="font-weight: bold"> </span><b class="cBold">outbound</b>).
</li>
<a name="wp1104938"> </a><li class="pSmartList1">Enter the IP-ACL name in the Profile Name field. 
</li>
<a name="wp1104939"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> This IP-ACL name must have already been created using the Create Profiles dialog box. If not, 
no filters will be enabled until you to go to the Create Profiles dialog box and create the profile.

</p>
<a name="wp1104941"> </a><li class="pSmartList1">Click <b class="cBold">Create </b>to associate the IP-ACL.
</li>
<a name="wp1104942"> </a><p class="pListBodyLevel1">
You see the newly associated access list in the list of IP-ACLs.

</p>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
