Cisco Nexus 7000 Series - Match (Class-Map)

match (class-map)
To configure match criteria for control place class maps, use the match command. To delete match criteria
for a control plane policy map, use the no form of the command.
match access-group name access-list
match exception [ip [unicast rpf-failure]| ipv6] {icmp {redirect| unreachable}| option}
match protocol arp
match redirect {arp-inspect| dhcp-snoop}
no match access-group name access-list
no match exception [ip [unicast rpf-failure]| ipv6] {icmp {redirect| unreachable}| option}
no match protocol arp
no match redirect {arp-inspect| dhcp-snoop}
Syntax Description
Matches an IP or MAC access control list.
access-group name access-list
Matches exception packets.exception
(Optional) Matches IPv4 exception packets.ip
(Optional) Matches IPv6 exception packets.ipv6
(Optional) Matches IPv4 Unicast Reverse Path
Forwarding (Unicast RPF) packets.
unicast rpf-failure
Matches IPv4 or IPv6 ICMP packets.icmp
Matches IPv4 or IPv6 ICMP redirect packets.redirect
Matches IPv4 or IPv6 ICMP unreachable packets.unreachable
Matches IPv4 or IPv6 option packets.option
Matches Address Resolution Protocol (ARP) packets.protocol arp
Matches dynamic ARP inspection or DHCP snooping
redirect packets.
redirect
Matches dynamic ARP inspection.arp-inspect
Matches dynamic DHCP snooping.dhcp-snoop
Cisco Nexus 7000 Series Security Command Reference
505
M Commands
match (class-map)