
226 Chapter 7: Security of MPLS Layer 2 VPNs
However, this functionality is implemented in software on the 3550. As an alternative,
hardware-based access control lists (ACLs) can be used to filter ingress control protocol
data units (PDUs).
For example, the following ACL controls a number of control packets found in switched
networks:
Extended MAC access list stop_ugly_stuff
deny any 0180.c200.0000 0000.0000.001f
deny any host 0100.0ccc.cccc
deny any host 0100.0ccc.cccd
deny any host 0100.0ccd.cdcd
deny any host 0100.0ccd.cdce
deny any host 0100.0ccc.cdd0
deny any host 000c.8580.d000
permit any any
c3550-b(config)#int fas 0/24
c3550-b(config-if)#mac ...