Switch default ACL

[MrBeginner]

Dear All,

I would like to ask about ACL for switch in default configuration.

When i see "sh ip access-list" in cisco switch,it show below output.

Extended IP access list CISCO-CWA-URL-REDIRECT-ACL
100 deny udp any any eq domain
101 deny tcp any any eq domain
102 deny udp any eq bootps any
103 deny udp any any eq bootpc
104 deny udp any eq bootpc any
105 permit tcp any any eq www
Extended IP access list preauth_ipv4_acl (per-user)
10 permit udp any any eq domain
20 permit tcp any any eq domain
30 permit udp any eq bootps any
40 permit udp any any eq bootpc
50 permit udp any eq bootpc any
60 deny ip any any
Extended IP access list sl_def_acl
10 deny tcp any any eq telnet
20 deny tcp any any eq www
30 deny tcp any any eq 22
40 permit ip any any

Let me know what is this and can we edit this default configuration ? i am using WS-c1960+24TC-LL (LAN Lite).I i confuse about it. and i can add deny or permit port and service in default ACL rule ,Please ? Let me know those acl can work without binding to interfaces ?

[Dennis Mink · Accepted solution]

amigo,

sure you can edit the ACL. the question is, is it applied to an interface? (if its not applied its not really doing anything)   so on any vlan interface you have like an access-group command, that would tie the ACL to the layer 3 interface. two questions:

1-what is you are trying to achieve?

2-what is your complete config on your switch?

thanks

[MrBeginner]

Hi,

I just want to know t this acl rule in switches without apply to interfaces and vlan. 

I didn't see any access-group. it already apply in default configuration. i didn't put any configuration .Because it is new switches  and I just want to confirm LAN Lite can support ACL or not.

[Reza Sharifi · Accepted solution]

Hi,

If you don't see any access-group applied to any interfaces than the ACLs are not doing anything.

HTH