C613-50170-01 Rev B
Command Reference for x510 Series
610
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
VLAN C
OMMANDS
VLAN
ACCESS
-
MAP
vlan access-map
Overview
Use this command to create a VLAN access-map and enter into VLAN access-map
mode, so you can add ACLs to the map. You can use any IPv4 or IPv6 hardware
ACLs. VLAN access-maps are used to attach ACLs to VLANs, and therefore to filter
traffic as it ingresses VLANs.
See the
ACL Feature Overview and Configuration Guide
for more information,
including information about the number of rules consumed by per-VLAN ACLs,
and ACL processing order.
Use the
no
variant of this command to delete a VLAN access-map.
Syntax
vlan access-map <
name
>
no vlan access-map <
name
>
Default
By default, no VLAN access-maps exist.
Mode
Global Configuration
Example
To apply ACL 3001 to VLAN 48, where the ACL drops IP traffic from any source to
any destination, use the commands:
awplus#
configure terminal
awplus(config)#
access-list 3001 deny ip any any
awplus(config)#
vlan access-map deny_all
awplus(config-vlan-access-map)#
match access-group 3001
awplus(config-vlan-access-map)#
exit
awplus(config)#
vlan filter deny_all vlan-list 48 input
Related
Commands
Command
changes
Version 5.4.6-2.1: command added
Parameter
Description
<name>
A name for the access-map.
