Solved: Named extended ACLs are not accepted in QoS class-map IOS 12.2(46) Cat 2960

trond1endr · ‎05-15-2009

The documentation for IOS 12.2(46)SE (Catalyst 2960), http://cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_46_se/configuration/guide/swqos.html#wp1056668, claims named (extended) ACLs can be used in conjunction with the match command in class-maps. Anycase, IOS complains with "% Invalid input detected at '^' marker."

Is this a bug in IOS 12.2(46)SE or its documentation?

Trond.

davy.timmermans · ‎05-15-2009

at first glance (according to the documentation)a named extended ACL can only be used with a MAC acl

View solution in original post

andrew.butterworth · ‎05-15-2009

Named ACLs can be used with Class-Maps however you need to use the keyword 'name' prior to entering the ACL name, which isn't required when using a numbered ACL:

class-map match-all GUEST-ANY

match access-group name GUEST-ANY-ACL

HTH

Andy

View solution in original post

davy.timmermans · ‎05-15-2009

at first glance (according to the documentation)a named extended ACL can only be used with a MAC acl

trond1endr · ‎05-15-2009

You are absolutely right. Thank you.

Trond.

andrew.butterworth · ‎05-15-2009

Named ACLs can be used with Class-Maps however you need to use the keyword 'name' prior to entering the ACL name, which isn't required when using a numbered ACL:

class-map match-all GUEST-ANY

match access-group name GUEST-ANY-ACL

HTH

Andy

trond1endr · ‎05-17-2009

How true indeed. I guess it's safe to say the documentation can be improved on this matter. The online help in IOS is far more accurate than the accompanying documentation. Thank you.

Trond.