Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Access-lists on Catalyst 3548-XL

I am trying to configure an access-list for a single port on a Catalyst 3548-XL switch. I want to only allow a range of ip addresses out through the port and deny all else.

These are the commands I have been using -

switch(Config)#access-list 6 permit


switch(Config)#interface fastethernet0/15

switch(Config-If)#ip access-group 6 out

When I enter the last line, I get an error -

Switch(config-if)#ip access-group 6 out


% Invalid input detected at '^' marker.

The error is under the I in IP.

Thanks and regards,


  • Other Network Infrastructure Subjects
Cisco Employee

Re: Access-lists on Catalyst 3548-XL

3500Xl won't support ACl as you are trying to implement. This is very simple layer 2 box- This access lit can onyl be applied on the vty lines to restrict the telnet access.

Switch(config)#line vty 0 4


Switch(config-line)#access-class ?

<1-199> IP access list

<1300-2699> IP expanded access list


Hope this helps

New Member

Re: Access-lists on Catalyst 3548-XL

It there any other way I can restrict access through a port on the Catalyst 3548-XL switch without using access lists?

I am trying to restrict access through a port to a range of IP addresses.

Thanks and regards,


Cisco Employee

Re: Access-lists on Catalyst 3548-XL

Without a Layer 3 device, you cannot configure access-lists. If you want to fully isolate ports, you can confiigure the port to be Protected Port. Also you can use port security feature which is based on MAC address though

New Member

Re: Access-lists on Catalyst 3548-XL

latest 2950/3550 switches does support ACLs. Am not sure if this is useful but XLs don't do it.

This widget could not be displayed.