2-268
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
match (access-map configuration)
match (access-map configuration)
Use the
match
access-map configuration command to set the VLAN map to match packets against one
or more access lists. Use the
no
form of this command to remove the match parameters.
match
{
ip address
{
name
|
number
} [
name
|
number
] [
name
|
number
]...} | {
mac address
{
name
}
[
name
] [
name
]...}
no match
{
ip address
{
name
|
number
} [
name
|
number
] [
name
|
number
]...} | {
mac address
{
name
}
[
name
] [
name
]...}
Syntax Description
Defaults
The default action is to have no match parameters applied to a VLAN map.
Command Modes
Access-map configuration
Command History
Usage Guidelines
You enter access-map configuration mode by using the
global configuration command.
You must enter one access list name or number; others are optional. You can match packets against one
or more access lists. Matching any of the lists counts as a match of the entry.
In access-map configuration mode, use the
match
command to define the match conditions for a VLAN
map applied to a VLAN. Use the
action
command to set the action that occurs when the packet matches
the conditions.
Packets are matched only against access lists of the same protocol type; IP packets are matched against
IP access lists, and all other packets are matched against MAC access lists.
Both IP and MAC addresses can be specified for the same map entry.
Examples
This example shows how to define and apply a VLAN access map
vmap4
to VLANs 5 and 6 that will
cause the interface to drop an IP packet if the packet matches the conditions defined in access list
al2
:
Switch(config)#
vlan access-map vmap4
Switch(config-access-map)#
match ip address al2
Switch(config-access-map)#
action drop
Switch(config-access-map)#
exit
Switch(config)#
vlan filter vmap4 vlan-list 5-6
ip address
Set the access map to match packets against an IP address access list.
mac address
Set the access map to match packets against a MAC address access list.
name
Name of the access list to match packets against.
number
Number of the access list to match packets against. This option is not valid for MAC
access lists.
Release
Modification
12.1(14)AX
This command was introduced.
