Restricting traffic on CatOS

I have a 6513 running hybrid mode. I need to restrict a particular VLAN so only sip and rtp traffic can talk to it. I've never done anything like that on CatOS, can someone help me out?

First, build the ACL this way:

set security acl ip permit (etc) make sure you have a permit ip any any at the end....in that way it's like IOS. Next, commit the acl like so: commit security acl

Then, map the acl to the vlans you want to filter like so:

set security acl map

That should do it! hope this helps.

I misspoke - Don't put a permit ip any any if you want to restrict it to SIP and RTP! sorry!

Both sides.

I know how to do it in IOS, I'm trying to do it in CatOS. This doesn't go IOS -> CatOS.

Thanks, that was the info on needed. One last question, do CatOS ACL's need a deny ip any any at the end of the ACL or is it implied and would only be stated for consistancy?

Pretty sure it's implied - the same as IOS ACLs.