Cisco WS-C6506 - Page 450

15-54
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 15 Configuring Access Control
Configuring VACLs
This example shows how to map IPACL1 to VLAN 10:
Console> (enable) set security acl map IPACL1 10
ACL IPACL1 mapped to vlan 10
Console> (enable)
This example shows the output if you try to map an ACL that has not been committed:
Console> (enable) set security acl map IPACL1 10
Commit ACL IPACL1 before mapping.
Console> (enable)
Displaying the Contents of a VACL
You can display the contents of a VACL with the show security acl info command.
To display the contents of a VACL, perform this task in privileged mode:
This example shows how to display the contents of a VACL that has been saved in NVRAM:
Console> (enable) show security acl info IPACL1
set security acl ip IPACL1
------------------------------------------------------------------
1. deny A
2. deny ip B any
3. deny c
4. permit any
This example shows how to display the contents of a VACL that is still in the edit buffer:
Console> (enable) show security acl info IPACL1 editbuffer
set security acl ip IPACL1
-----------------------------------------------------------------
1. deny A
2. deny ip B any
3. deny C
4. deny D
5. permit any
Console> (enable)
Displaying a VACL-to-VLAN Mapping
You can display a VACL-to-VLAN mapping for a specified ACL or VLAN with the show security acl
map command.
Task Command
Map a VACL to a VLAN. set security acl map acl_name vlans
Task Command
Display the contents of a VACL. show security acl info {acl_name | all} [editbuffer
[editbuffer_index]]