Cisco Nexus 5500 Series - Match

150
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter M Commands
match
match
To specify an access control list (ACL) for traffic filtering in a VLAN access map, use the match
command. To remove a match command from a VLAN access map, use the no form of this command.
match {ip | ipv6 | mac} address access-list-name
no match {ip | ipv6 | mac} address access-list-name
Syntax Description
Command Default By default, the switch classifies traffic and applies IPv4 ACLs to IPv4 traffic and MAC ACLs to all other
traffic.
Command Modes VLAN access-map configuration mode
Command History
Usage Guidelines You can specify only one match command per access map.
Examples This example shows how to create a VLAN access map named vlan-map-01, assign an IPv4 ACL named
ip-acl-01 to the map, specify that the switch forwards packets matching the ACL, and enable statistics
for traffic matching the map:
switch(config)# vlan access-map vlan-map-01
switch(config-access-map)# match ip address ip-acl-01
switch(config-access-map)# action forward
switch(config-access-map)# statistics
Related Commands
ip Specifies an IPv4 ACL.
ipv6 Specifies an IPv6 ACL
mac Specifies a MAC ACL.
address
access-list-name
Specifies the IPv4, IPv6, or MAC address and the access list name. The name
can be up to 64 alphanumeric, case-sensitive characters long.
Release Modification
5.2(1)N1(1) This command was introduced.
Command Description
action Specifies an action for traffic filtering in a VLAN access map.
show vlan access-map Displays all VLAN access maps or a VLAN access map.
show vlan filter Displays information about how a VLAN access map is applied.
vlan access-map Configures a VLAN access map.
vlan filter Applies a VLAN access map to one or more VLANs.