Block Port NETBIOS on Cisco Switch/Nexus

[ardhy.suarabaskara]

Dear All,

I want to block port netbios on cisco switch with this comand :

ip access-list extended NETBIOS

deny tcp any any eq 135

deny udp any any eq 135

deny tcp any any range 137 139

deny udp any any range 137 139

deny tcp any any eq 445

deny udp any any eq 445

permit ip any any

But, I have many vlan to assign ip access-group NETBIOS in on some vlan,

any idea to configuration global ACL for block NETBIOS port.

Please, your help.

Thanks

Ardhy

[Marvin Rhoads]

The global ACL type is only available on ASA firewalls - not L3 switches.

On a L3 switch (IOS or NX-OS) you can only apply extended ACLs on SVIs (i.e. "interface vlan xxx") in the data plane or, via an infrastructure ACL, to the switch management address in the management plane.