Cisco Nexus 9000 Series - Applying a VACL to a VLAN

DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Removes the VLAN access map configuration for the
specified access map. If you specify the sequence-number
no vlan access-map map-name [sequence-number]
Example:
Step 2
argument and the VACL contains more than one entry, the
command removes only the entry specified.
switch(config)# no vlan access-map acl-mac-map 10
Displays the ACL configuration.(Optional) show running-config aclmgr
Example:
Step 3
switch(config)# show running-config aclmgr
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 4
switch(config)# copy running-config startup-config
Applying a VACL to a VLAN
You can apply a VACL to a VLAN.
Before you begin
If you are applying a VACL, ensure that the VACL exists and is configured to filter traffic in the manner that
you need for this application.
SUMMARY STEPS
1. configure terminal
2. [no] vlan filter map-name vlan-list list
3. (Optional) show running-config aclmgr
4. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Applies the VACL to the VLANs by the list that you
specified. The no option unapplies the VACL.
[no] vlan filter map-name vlan-list list
Example:
Step 2
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
300
Configuring VLAN ACLs
Applying a VACL to a VLAN