Applying A Vlan Map To A Vlan; Using Vlan Maps In Your Network - Cisco Catalyst 3750 Software Configuration Manual

Chapter 25 Configuring Network Security with ACLs
Example 4
In this example, the VLAN map has a default action of drop for all packets (IPv4 and non-IPv4). Used
with access lists tcp-match and good-hosts from Examples 2 and 3, the map will have the following
results:
•
•
•
•
Switch(config)# vlan access-map drop-all-default 10
Switch(config-access-map)# match ip address tcp-match
Switch(config-access-map)# action forward
Switch(config-access-map)# exit
Switch(config)# vlan access-map drop-all-default 20
Switch(config-access-map)# match mac address good-hosts
Switch(config-access-map)# action forward

Applying a VLAN Map to a VLAN

Beginning in privileged EXEC mode, follow these steps to apply a VLAN map to one or more VLANs:
Command
Step 1 configure terminal
Step 2 vlan filter mapname vlan-list list
Step 3
show running-config
Step 4
copy running-config startup-config
To remove the VLAN map, use the no vlan filter mapname vlan-list list global configuration command.
This example shows how to apply VLAN map 1 to VLANs 20 through 22:
Switch(config)# vlan filter map 1 vlan-list 20-22

Using VLAN Maps in Your Network

This section describes some typical uses for VLAN maps and includes these topics:
•
•
78-15870-01
Forward all TCP packets
Forward MAC packets from hosts 0000.0c00.0111 and 0000.0c00.0211
Drop all other IP packets
Drop all other MAC packets
Purpose
Enter global configuration mode.
Apply the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
Display the access list configuration.
(Optional) Save your entries in the configuration file.
Wiring Closet Configuration, page 25-32
Denying Access to a Server on Another VLAN, page 25-33
Catalyst 3750 Metro Switch Software Configuration Guide
Configuring VLAN Maps
25-31