16-38
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 16 Configuring Access Control
Configuring VACLs
This example shows how to clear all VACL-to-VLAN mappings:
Console> (enable)
clear security acl map all
Map deletion in progress.
Successfully cleared mapping between ACL ip1 and VLAN 10.
Successfully cleared mapping between ACL ipx1 and VLAN 10.
.... display text omitted
Console> (enable)
This example shows how to clear the mapping for a specific VACL on a specific VLAN:
Console> (enable)
clear security acl map IPACL1 50
Map deletion in progress.
Successfully cleared mapping between ACL ipacl1 and VLAN 50.
Console> (enable)
Displaying VACL Management Information
You can display VACL management information with the
show security acl resource-usage
command.
To display VACL management information, perform this task in privileged mode:
This example shows how to display VACL management information:
Console> (enable)
show security acl resource-usage
ACL resource usage:
ACL storage (mask/value): 0.29%/0.10%
ACL to switch interface mapping table: 0.39%
ACL layer 4 port operators: 0.0%
Console (enable)
Capturing Traffic Flows on Specified Ports
You can use the
capture option
in the
set security acl
(
ip
,
ipx
, and
mac
) commands to specify that
packets that match the specified flows are captured and transmitted out of capture ports. You can specify
capture ports using the
set security acl capture-ports
mod/ports...
command. When you use the
capture
option, the packets that match the specified flows are captured in parallel and transmitted out
of the capture ports. Capture ports do not send out all the captured traffic; they send out only the traffic
belonging to the VLANs of the captured port.
Configuration Guidelines
Follow these guidelines when configuring capture ports:
•
The capture port cannot be part of an EtherChannel.
•
The capture port cannot be an ATM port.
•
The capture port must be in the spanning tree forwarding state for the VLAN.
Task
Command
Display VACL management
information.
show security acl resource-usage
