Contents
What are the actions available in VLAN ACL?
VLAN ACL is used to filter traffic of a VLAN (traffic within a VLAN i.e traffic for destination host residing in same VLAN). Unlike Router ACL, VACL is not defined in a direction but it is possible to filter traffic based on the direction of the traffic by combining VACLs and Private VLAN features.
Do stateful firewalls use ACL?
They’re not ‘aware’ of traffic patterns or data flows. A stateless firewall uses Access Control Lists “ACLs” (which are network traffic filters used to control incoming or outgoing network traffic).
Why are ACL stateless?
A network ACL contains a numbered list of rules. A network ACL has separate inbound and outbound rules, and each rule can either allow or deny traffic. Network ACLs are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa).
What do you need to know about a VLAN ACL?
A VLAN ACL (VACL) is one application of an IP ACL. You can configure VACLs to apply to all packets that are routed into or out of a VLAN or are bridged within a VLAN. VACLs are strictly for security packet filtering and for redirecting traffic to specific physical interfaces. VACLs are not defined by direction (ingress or egress).
How are ACLs and VACLs used in Cisco Catalyst?
To apply access control to both bridged and routed traffic, you can use VACLs alone or a combination of VACLs and ACLs. You can define ACLs on the VLAN interfaces to apply access control to both the ingress and egress routed traffic. You can define a VACL to apply access control to the bridged traffic.
How does VACLs control access to the VLAN?
• VACLs control access to the VLAN of all packets (bridged and routed). Packets can either enter the VLAN through a Layer 2 port or through a Layer 3 port after being routed. You can also use VACLs to filter traffic between devices in the same VLAN.
What kind of ACLs are available for Cisco IOS?
Cisco IOS Software Release 12.2SX supports the following types of ACLs: • Cisco IOS ACLs are applied to Layer 3 interfaces. They filter traffic routed between VLANs. For more information about Cisco IOS ACLs, see Chapter 42, “Understanding Cisco IOS ACL Support.”