35-6
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 35 Configuring VLAN ACLs
Configuring VACLs
When defining a VLAN access map, note the following information:
•
To insert or modify an entry, specify the map sequence number.
•
If you do not specify the map sequence number, a number is automatically assigned.
•
You can specify only one match clause and one action clause per map sequence.
•
Use the
no
keyword with a sequence number to remove a map sequence.
•
Use the
no
keyword without a sequence number to remove the map.
See the
“VLAN Access Map Configuration and Verification Examples” section on page 35-9
.
Configuring a Match Clause in a VLAN Access Map Sequence
To configure a match clause in a VLAN access map sequence, perform this task:
When configuring a match clause in a VLAN access map sequence, note the following information:
•
You can select one or more ACLs.
•
VACLs attached to WAN interfaces support only standard and extended Cisco IOS IP ACLs.
•
Use the
no
keyword to remove a match clause or specified ACLs in the clause.
•
For information about named MAC-Layer ACLs, refer to the
“Configuring MAC ACLs” section on
page 41-67
.
•
For information about Cisco IOS ACLs, refer to the
Cisco IOS Security Configuration Guide
,
Release 12.2, “Traffic Filtering and Firewalls,” at this URL:
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/fsecur_c.html
See the
“VLAN Access Map Configuration and Verification Examples” section on page 35-9
.
Router(config)#
no
vlan access-map
map_name
0-65535
Deletes a map sequence from the VLAN access map.
Router(config)#
no
vlan access-map
map_name
Deletes the VLAN access map.
Command
Purpose
Command
Purpose
Router(config-access-map)#
match
{
ip address
{
1-199
|
1300-2699
|
acl_name
} |
ipx address
{
800-999
|
acl_name
}|
mac
address
acl_name
}
Configures the match clause in a VLAN access map sequence.
Router(config-access-map)#
no
match
{
ip address
{
1-199
|
1300-2699
|
acl_name
} |
ipx address
{
800-999
|
acl_name
}|
mac
address
acl_name
}
Deletes the match clause in a VLAN access map sequence.
