Filter service types on individual ports

[Jon Ferrara]

I work in a K-12 environment. I have new 5400 series switches and I am looking for a way to filter service types(in this case port 443 traffic) coming from certain ethernet interfaces. Any info on this would be much appreciated. Thanks in advance.

[Matt Hobbs]

Hi Jon,

With the new K.12.xx software, you can now do ACL's per port.

Something along these lines would deny traffic destined to port 443. This syntax may not be exactly correct but it's along these lines:

ip access-list extended 100
deny tcp any any eq 443
permit ip any any

interface a1
ip access-list 100 in

If you wanted to filter traffic coming from port 443 then you would use:

deny tcp any eq 443 any

I'd recommend you read the chapter on ACL's in the Advanced Traffic and Management Guide.

[Jon Ferrara]

Will do Matt. Thanks!