C613-50631-01 Rev A Command Reference for IE340 Series 686
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
VLAN COMMANDS
VLAN
ACCESS-MAP
vlan access-map
Overview Use this command to create a VLAN access-map and enter into VLAN access-map
mode, so you can add ACLs to the map. You can use any IPv4 or IPv6 hardware
ACLs. VLAN access-maps are used to attach ACLs to VLANs, and therefore to filter
traffic as it ingresses VLANs.
See the ACL Feature Overview and Configuration Guide for more information,
including information about the number of rules consumed by per-VLAN ACLs,
and ACL processing order.
Use the no variant of this command to delete a VLAN access-map.
Syntax
vlan access-map <name>
no vlan access-map <name>
Default By default, no VLAN access-maps exist.
Mode Global Configuration
Example To apply ACL 3001 to VLAN 48, where the ACL drops IP traffic from any source to
any destination, use the commands:
awplus# configure terminal
awplus(config)# access-list 3001 deny ip any any
awplus(config)# vlan access-map deny_all
awplus(config-vlan-access-map)# match access-group 3001
awplus(config-vlan-access-map)# exit
awplus(config)# vlan filter deny_all vlan-list 48 input
Related
commands
match access-group
show vlan access-map
vlan filter
Command
changes
Version 5.4.6-2.1: command added
Parameter Description
<name> A name for the access-map.