Cisco Catalyst 2960 Series, Configuration Manual

Page: 1335 / 2288

Purpose Command or Action
Sets the action for the map entry. Enter one of the following commands to
specify an IP packet or a non-IP packet (with
Step 3
only a known MAC address) and to match the
packet against one or more ACLs (standard or
extended):
• action { forward }
Switch(config-access-map)#
action
forward
• action { drop }
Switch(config-access-map)# action
drop
Applies the VLAN map to one or more VLAN IDs. vlan filter mapname vlan-list list Step 4
Example:
Switch(config)# vlan filter map 1
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
vlan-list 20-22
Creating a VLAN Map
Each VLAN map consists of an ordered series of entries. Beginning in privileged EXEC mode, follow these
steps to create, add to, or delete a VLAN map entry:
SUMMARY STEPS
1.
configure terminal
2. vlan access-map name [ number ]
3.
match { ip | mac } address { name | number } [ name | number ]
4.
action
{
drop
|
forward
}
5. end
6.
show running-config
7. copy running-config startup-config
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1253
How to Configure VLAN Access Control Lists