Vacls And Actions; Statistics; Configuring Vacls; Creating Or Changing A Vacl - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

VACLs and Actions

VACLs and Actions
In access map configuration mode, you use the action command to specify one of the following actions:
• Forward—Sends the traffic to the destination determined by normal operation of the switch.
• Drop—Drops the traffic.

Statistics

The switch can maintain global statistics for each rule in a VACL. If a VACL is applied to multiple VLANs,
the maintained rule statistics are the sum of packet matches (hits) on all the interfaces on which that VACL
is applied.
The Cisco Nexus 5000 Series switch does not support interface-level VACL statistics.
Note
For each VLAN access map that you configure, you can specify whether the switch maintains statistics for
that VACL. This allows you to turn VACL statistics on or off as needed to monitor traffic filtered by a VACL
or to help troubleshoot VLAN access-map configuration.

Configuring VACLs

Creating or Changing a VACL

You can create or change a VACL. Creating a VACL includes creating an access map that associates an IP
ACL or MAC ACL with an action to be applied to the matching traffic.
To create or change a VACL, perform this task:
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
292
Command or Action
switch# configure terminal
switch(config)# vlan access-map
map-name
switch(config-access-map)# match ip
address ip-access-list
switch(config-access-map)# match mac
address mac-access-list
switch(config-access-map)# action {drop
| forward}
switch(config-access-map)# [no] statistics
Purpose
Enters configuration mode.
Enters access map configuration mode for the
access map specified.
Specifies an IPv4 and IPV6 ACL for the map.
Specifies a MAC ACL for the map.
Specifies the action that the switch applies to
traffic that matches the ACL.
(Optional)
Specifies that the switch maintains global statistics
for packets matching the rules in the VACL.
Configuring VACLs
OL-16597-01