ACLs on Catalyst 2960 family

Nov 06, 2007 2 Replies

Rate this thread:

Michael T. Davis 18 years ago

The documentation I've found on cisco.com seems to imply that the Catalyst 2960 series can accommodate IP-based port ACLs. Is that really the case, or is this basically just an offering to tighten down security on accessing the management interface(s)?

Thanks, Mike

-- | Systems Specialist: CBE,MSE Michael T. Davis (Mike) | Departmental Networking/Computing

formatting link

| The Ohio State University | 197 Watts, (614) 292-6928

Vote

Trendkill 18 years ago

I'm pretty sure a 2960 is a fully featured l3 switch, and therefore does support layer 3 ACLs just like any router. See this link/blurb:

formatting link

"To guard against denial-of-service (DoS) and other attacks, ACLs can be used to restrict access to sensitive portions of the network by denying packets based on source and destination MAC addresses, IP addresses, or TCP/User Datagram Protocol (UDP) ports. ACL lookups are done in hardware, so forwarding performance is not compromised when ACL-based security implemented."

Vote

Merv 18 years ago

Catalyst 2960's are layer 2 switches

Cisco has two software offering for these switches: a) "Layer2+" b) LAN lite - i.e. basic layer 2 features

Part of the "layer2+" is the ability to configure access-lists

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required