What is Switchport ACLs?

By | 9th November 2015

How to Configure Switchport


The Switchport ACL (PACL) feature provides the ability to perform access control on specific Layer 2 ports. ACLs can also be used to control traffic on VLANs. Switch port ACLs can only be applied to Layer 2 interfaces in the inbound direction, and this controls traffic via IP access Lists.

Switch port ACL application is usually effective when applied on a trunk port, be warned that, if applied on a port with voice VLAN, the ACL filters traffic on both data and voice VLANs. The switch examines ACLs associated with features configured on a given interface and either permits or denies packet forwarding based on the criteria found in the entries of the ACL.

With switch port ACLs, you can filter IP traffic by using IP access lists and non-IP traffic using MAC addresses.

We use the topology below as sample. follow me as we configure SW1 with ACLs to permit PC A to access Server A, and deny PC B from accessing the same network.

switchport acls


SW1(config)#mac access-list extended orbit123

SW1(config-ext-macl)#deny any host 000e.53ac.9b72

SW1(config-ext-macl)#permit any any

Switch(config)#int f0/3

Switch(config)#mac access-group orbit123 in

Looking at the configuration commands above, you can see that we created and extended named access list which is our only option. After creating the access list, we applied in on and interface (fa0/3). It more like the same with IP list, except that you start your command statement with mac.

Verify your configuration

Use the Show access-list command to verify your configuration.

SW1#show access-list

How to Configure Switch port Security

How to Configure VTP Pruning on a switched Network

Access Control Lists Explained (ACLs)


      Access List Configuration Example

     Applying Extended ACLs on Interfaces

        Creating Standard ACLs

Host Standby Router Redundancy Protocol (HSRP)

Virtual Router Redundancy Protocol (VRRP)

Gateway Load Balancing Protocol (GLBP)

Spanning Tree Protocol (STP)

VLAN Trunking Protocol (VTP)

IPv6 Explained


RIPv6 or RIPng



Leave a Reply

Your email address will not be published. Required fields are marked *