ACL ON CISCO SWITCHES

[wahid]

Hi,

since cisco switches are L2 devices, why is it blocking traffic based on L3.

I setup

10 deny 10.0.0.0 0.0.0.255 10.0.0.0 0.0.0.255

and it would block traffic within the same vlan.

I have two pcs sitting on the switch , both configured in same vlan and applied that ACL. I also had deny Ip any any and it would drop pings.

my questions is that switches are L2 devices and send traffic based on mac address, so why it is dropping based on ip ???

thanks,

wahid

[johnd2310]

Hi,

Most  L2 switches run ASICs that allow processing of packets beyond mac addresses and, therefore, you find that most Cisco switches can also be routers or L3 switches.  The following doc will explain a bit about how modern switches evolved:

https://www.cisco.com/c/en/us/about/press/internet-protocol-journal/back-issues/table-contents-19/switch-evolution.html

Thanks

John

[Nidhi · Accepted solution]

This query should be for the switching community .