Creating A Vlan Map - Cisco Catalyst 2960-XR Security Configuration Manual

Creating a VLAN Map

Command or Action
address ip2
Step 3 Enter one of the following commands to
specify an IP packet or a non-IP packet (with
only a known MAC address) and to match the
packet against one or more ACLs (standard or
extended):
• action { forward}
Switch(config-access-map)# action
forward
• action { drop}
Switch(config-access-map)# action
drop
Step 4 vlan filter mapname vlan-list list
Example:
Switch(config)# vlan filter map 1
vlan-list 20-22
Related Topics
Creating a Numbered Standard ACL, on page 120
Creating a Numbered Extended ACL, on page 122
Creating Named MAC Extended ACLs, on page 132
Creating a VLAN Map, on page 136
Applying a VLAN Map to a VLAN, on page 138
Creating a VLAN Map
Each VLAN map consists of an ordered series of entries. Beginning in privileged EXEC mode, follow these
steps to create, add to, or delete a VLAN map entry:
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
136
Purpose
If the VLAN map is configured with a match clause for a type of
Note
packet (IP or MAC) and the map action is drop, all packets that
match the type are dropped. If the VLAN map has no match clause,
and the configured action is drop, all IP and Layer 2 packets are
dropped.
Sets the action for the map entry.
Applies the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
Configuring IPv4 ACLs
OL-29434-01