PurposeCommand or Action
If the VLAN map is configured with a match clause for a type of
packet (IP or MAC) and the map action is drop, all packets that
match the type are dropped. If the VLAN map has no match clause,
and the configured action is drop, all IP and Layer 2 packets are
dropped.
Note
address ip2
Sets the action for the map entry.Enter one of the following commands to
specify an IP packet or a non-IP packet (with
Step 3
only a known MAC address) and to match the
packet against one or more ACLs (standard or
extended):
•
action { forward}
Switch(config-access-map)# action
forward
•
action { drop}
Switch(config-access-map)# action
drop
Applies the VLAN map to one or more VLAN IDs.
vlan filter mapname vlan-list list
Step 4
Example:
Switch(config)# vlan filter map 1
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
vlan-list 20-22
Related Topics
Creating a Numbered Standard ACL, on page 120
Creating a Numbered Extended ACL, on page 122
Creating Named MAC Extended ACLs, on page 132
Creating a VLAN Map, on page 136
Applying a VLAN Map to a VLAN, on page 138
Creating a VLAN Map
Each VLAN map consists of an ordered series of entries. Beginning in privileged EXEC mode, follow these
steps to create, add to, or delete a VLAN map entry:
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
136 OL-29434-01
Configuring IPv4 ACLs
Creating a VLAN Map
To Next Page
Loading...
Need help?
General
