Configuring Vlan Access Map With Logging - Cisco Nexus 5600 Series Configuration Manual

Configuring System Message Logging
Procedure
Step 1
Step 2
Step 3
Step 4
The following example shows how to apply the mgmt0 interface with the logging specified in acl1 for all
ingress traffic:
switch# configure terminal
switch(config)# interface mgmt0
switch(config-if)# ip access-group acl1 in
switch(config-if)# copy running-config startup-config

Configuring VLAN Access Map with Logging

Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
This example shows how to create a VLAN access map for logging.
switch# configure terminal
switch(config)# vlan access-map vacl1
switch(config-access-map)# match ip address pacl1
switch(config-access-map)# action drop log
switch(config-access-map)# exit
switch(config)#
OL-31641-01
Command or Action
switch# configure terminal
switch(config)# interface mgmt0
switch(config-if)# ip access-group name
in
switch(config-if)# copy running-config
startup-config
Command or Action
switch# configure terminal
switch(config)# vlan access-map
map-name
switch(config-access-map)# match ip
address ip-access-list
switch(config-access-map)# action drop
log
switch(config-access-map)# exit
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
Configuring VLAN Access Map with Logging
Purpose
Enters global configuration mode.
Specifies the mgmt0 interface.
Enables ACL logging on ingress traffic for the
specified interface.
(Optional)
Saves the change persistently through reboots and
restarts by copying the running configuration to the
startup configuration.
Purpose
Enters global configuration mode.
Enters access map configuration mode for the
access map specified.
Specifies an IPv4 and IPv6 ACL for the map.
Specifies the action that the switch applies to
traffic that matches the ACL.
Exits access map configuration mode.
111