Chapter 26
Configuring Network Security with ACLs
Applying a VLAN Map to a VLAN
Beginning in privileged EXEC mode, follow these steps to apply a VLAN map to one or more VLANs:
Command
Step 1
configure terminal
Step 2
vlan filter mapname vlan-list list
Step 3
show running-config
Step 4
copy running-config startup-config
To remove the VLAN map, use the no vlan filter mapname vlan-list list global configuration command.
This example shows how to apply VLAN map 1 to VLANs 20 through 22:
Switch(config)# vlan filter map 1 vlan-list 20-22
Using VLAN Maps in Your Network
•
•
Wiring Closet Configuration
In a wiring closet configuration, routing might not be enabled on the switch. In this configuration, the
switch can still support a VLAN map and a QoS classification ACL. In
and Host Y are in different VLANs and are connected to wiring closet switches A and C. Traffic from
Host X to Host Y is eventually being routed by Switch B, a Layer 3 switch with routing enabled. Traffic
from Host X to Host Y can be access-controlled at the traffic entry point, Switch A.
OL-23400-01
Purpose
Enter global configuration mode.
Apply the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
Display the access list configuration.
(Optional) Save your entries in the configuration file.
Wiring Closet Configuration, page 26-33
Denying Access to a Server on Another VLAN, page 26-34
Cisco ME 3800X and 3600X Switch Software Configuration Guide
Configuring VLAN Maps
Figure
26-4, assume that Host X
26-33