PurposeCommand or Action
Sets the action for the map entry.Enter one of the following commands to
specify an IP packet or a non-IP packet (with
Step 3
only a known MAC address) and to match the
packet against one or more ACLs (standard or
extended):
•
action { forward}
Switch(config-access-map)# action
forward
•
action { drop}
Switch(config-access-map)# action
drop
Applies the VLAN map to one or more VLAN IDs.
vlan filter mapname vlan-list list
Step 4
Example:
Switch(config)# vlan filter map 1
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
vlan-list 20-22
Creating a VLAN Map
Each VLAN map consists of an ordered series of entries. Beginning in privileged EXEC mode, follow these
steps to create, add to, or delete a VLAN map entry:
SUMMARY STEPS
1.
configure terminal
2.
vlan access-map name [number]
3.
match {ip | mac} address {name | number} [name | number]
4.
action {drop | forward}
5.
end
6.
show running-config
7.
copy running-config startup-config
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1253
How to Configure VLAN Access Control Lists
To Next Page
Loading...
