C613-50631-01 Rev A Command Reference for IE340 Series 694
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
VLAN COMMANDS
VLAN
FILTER
vlan filter
Overview Use this command to apply a VLAN access-map to a list of VLANs. The switch uses
the ACLs in the access-map to filter traffic ingressing those VLANs.
See the ACL Feature Overview and Configuration Guide for more information,
including information about the number of rules consumed by per-VLAN ACLs,
and ACL processing order.
Use the no variant of this command to to remove the access-map filter from the
listed VLANs.
Syntax
vlan filter <access-map-name> vlan-list <vid> input
no vlan filter <access-map-name> vlan-list <vid> input
Default By default, no VLAN filters exist.
Mode Global Configuration
Example To apply ACL 3001 to VLAN 48, where the ACL drops IP traffic from any source to
any destination, use the commands:
awplus# configure terminal
awplus(config)# access-list 3001 deny ip any any
awplus(config)# vlan access-map deny_all
awplus(config-vlan-access-map)# match access-group 3001
awplus(config-vlan-access-map)# exit
awplus(config)# vlan filter deny_all vlan-list 48 input
Related
commands
match access-group
show vlan filter
vlan access-map
Command
changes
Version 5.4.6-2.1: command added
Parameter Description
<access-map-name> The name of the VLAN access-map to apply to the
specified list of VLANs
vlan-list <vid> The list of VLANs to filter. You can specify a single VLAN
(e.g. 49), a comma-separated list of VLANs (e.g. 49, 51), a
hyphenated range of VLANs (e.g. 49-51), or a combination
(e.g. 49,51-53)
input Apply the filter to ingress traffic