topic Configure downloadable ACL in Network Access Control

Configure downloadable ACL

apocalypse_nsl — Mon, 11 Mar 2019 03:19:41 GMT

Dear all,

I have configure 802.1x with downloadable ACL on IOS version 12.2(52)SE and 12.2(55)SE4, I found there are some different behavior.

On 12.2(52)SE, I need to create a default ACL and apply the ACL on interface.

On 12.2(55)SE4, there is no need to create a default ACL not to apply on interface.

I check the configuration guide, seems the default acl must configure on interface.

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1316124

Anyone know it is an enhancement on Cisco IOS?

Regards,

Alan

Configure downloadable ACL

apocalypse_nsl — Thu, 18 Apr 2013 17:49:28 GMT

Anyone konw??

Configure downloadable ACL

Jatin Katyal — Thu, 18 Apr 2013 23:53:49 GMT

Yes the behaviour has been changed. Starting in 12.2(55)SE, you don't have to configure a static default ACL. Here is a reference URL. This is documented in the same URL you posted.

Beginning with Cisco IOS Release 12.2(55)SE, if you do not configure a static ACL on a port, a dynamic Auth-Default-ACL is created and its policies are enforced before dACLs are downloaded and applied.

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1322067

Jatin Katyal

- Do rate helpful posts -

Configure downloadable ACL

apocalypse_nsl — Fri, 19 Apr 2013 01:48:37 GMT

I overlook the document. Thanks, Jatin.

Configure downloadable ACL

Jatin Katyal — Fri, 19 Apr 2013 01:53:09 GMT

It happens.

Could you please mark this thread "RESOLVED" so that others can take benefits out of it.

Regards,

Jatin Katyal