action
To specify what the device does when a packet matches a permit command in a VLAN access control list
(VACL), use the action command. To remove an action command, use the no form of this command.
action drop [log]
no action drop [log]
action forward
no action forward
action redirect{ethernet slot | port | port-channel channel-number.subinterface-number}
no action redirect{ethernet slot | port | port-channel channel-number.subinterface-number}
Syntax Description
Specifies that the device drops the packet.drop
(Optional) Specifies that the device logs the packets
it drops because of the drop keyword.
log
Specifies that the device forwards the packet to its
destination port.
forward
Specifies that the device redirects the packet to an
interface.
redirect
Specifies the Ethernet interface that the device
redirects the packet to.
ethernet slot/port
Specifies the port-channel interface that the device
redirects the packet to.
The dot separator is required between the
channel-number and subinterface-number
arguments.
Note
port-channel channel-number.subinterface-number
Command Default
None
Command Modes
VLAN access-map configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Cisco Nexus 7000 Series Security Command Reference
9
A Commands
action