Configure downloadable ACL

[apocalypse_nsl]

Dear all,

I have configure 802.1x with downloadable ACL on IOS version 12.2(52)SE and 12.2(55)SE4, I found there are some different behavior.

On 12.2(52)SE, I need to create a default ACL and apply the ACL on interface.

On 12.2(55)SE4, there is no need to create a default ACL not to apply on interface.

I check the configuration guide, seems the default acl must configure on interface.

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1316124

Anyone know it is an enhancement on Cisco IOS?

Regards,

Alan

[apocalypse_nsl]

Anyone konw??

[Jatin Katyal · Accepted solution]

Yes the behaviour has been changed. Starting in 12.2(55)SE, you don't have to configure a static default ACL.  Here is a reference URL. This is documented in the same URL you posted.

Beginning with Cisco IOS Release 12.2(55)SE, if you do not configure a static ACL on a port, a dynamic Auth-Default-ACL is created and its policies are enforced before dACLs are downloaded and applied.

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1322067

Jatin Katyal


- Do rate helpful posts -

[apocalypse_nsl]

I overlook the document. Thanks, Jatin.

[Jatin Katyal · Accepted solution]

It happens.

Could you please mark this thread "RESOLVED" so that others can take benefits out of it.

Regards,

Jatin Katyal