Cisco Nexus 7000 Series, Command Reference Manual

Page: 533 / 1018

match (VLAN access-map)
To specify an access control list (ACL) for traffic filtering in a VLAN access map, use the match command.
To remove a match command from a VLAN access map, use the no form of this command.
match { ip| ipv6 | mac } address access-list-name
no match
{
ip| ipv6| mac
}
address access-list-name
Syntax Description
Specifies that the ACL is an IPv4 ACL. ip
Specifies that the ACL is an IPv6 ACL. ipv6
Specifies that the ACL is a MAC ACL. mac
Specifies the ACL by name, which can be up to 64
alphanumeric, case-sensitive characters.
address access-list-name
Command Default
None
Command Modes
VLAN access-map configuration
Command History
Modification Release
The ipv6 keyword was added. 4.1(2)
This command was introduced. 4.0(1)
Usage Guidelines
You can specify one or more match commands per entry in a VLAN access map.
By default, the device classifies traffic and applies IPv4 ACLs to IPv4 traffic, IPv6 ACLs to IPv6 traffic, and
MAC ACLs to all other traffic.
This command does not require a license.
Examples This example shows how to create a VLAN access map named vlan-map-01 and add two entries that each
have two
match
commands and one
action
command:
switch(config-access-map)#
vlan access-map vlan-map-01
switch(config-access-map)# match ip address ip-acl-01
switch(config-access-map)# action forward
switch(config-access-map)# match mac address mac-acl-00f
switch(config-access-map)#
vlan access-map vlan-map-01
switch(config-access-map)# match ip address ip-acl-320
Cisco Nexus 7000 Series Security Command Reference
507
M Commands
match (VLAN access-map)