Once you have created one or more ACLs you must apply them to the port or ports on the device where the edge switches connect. These ports will be controlled by the ACL based on the host state. Below is an example of the command needed to apply the ACL. This may vary depending on the device.
ip access-group Nac in