Block Port NETBIOS on Cisco Switch/Nexus

ardhy.suarabaskara — Tue, 12 Mar 2019 09:21:44 GMT

Dear All,

I want to block port netbios on cisco switch with this comand :

ip access-list extended NETBIOS

deny tcp any any eq 135

deny udp any any eq 135

deny tcp any any range 137 139

deny udp any any range 137 139

deny tcp any any eq 445

deny udp any any eq 445

permit ip any any

But, I have many vlan to assign ip access-group NETBIOS in on some vlan,

any idea to configuration global ACL for block NETBIOS port.

Please, your help.

Thanks

Ardhy

The global ACL type is only

Marvin Rhoads — Mon, 15 May 2017 03:12:56 GMT

The global ACL type is only available on ASA firewalls - not L3 switches.

On a L3 switch (IOS or NX-OS) you can only apply extended ACLs on SVIs (i.e. "interface vlan xxx") in the data plane or, via an infrastructure ACL, to the switch management address in the management plane.

topic The global ACL type is only in Network Security

Block Port NETBIOS on Cisco Switch/Nexus

The global ACL type is only