Applying A Vlan Map To A Vlan; Using Vlan Maps In Your Network; Wiring Closet Configuration - Cisco WS-C3560-48PS-S Software Configuration Manual

Chapter 27 Configuring Network Security with ACLs

Applying a VLAN Map to a VLAN

Beginning in privileged EXEC mode, follow these steps to apply a VLAN map to one or more VLANs:
Command
Step 1
configure terminal
Step 2
vlan filter mapname vlan-list list
Step 3
show running-config
Step 4 copy running-config startup-config
To remove the VLAN map, use the no vlan filter mapname vlan-list list global configuration command.
This example shows how to apply VLAN map 1 to VLANs 20 through 22:
Switch(config)# vlan filter map 1 vlan-list 20-22

Using VLAN Maps in Your Network

This section describes some typical uses for VLAN maps and includes these topics:
•
•

Wiring Closet Configuration

In a wiring closet configuration, routing might not be enabled on the switch. In this configuration, the
switch can still support a VLAN map and a QoS classification ACL. In
and Host Y are in different VLANs and are connected to wiring closet switches A and C. Traffic from
Host X to Host Y is eventually being routed by Switch B, a Layer 3 switch with routing enabled. Traffic
from Host X to Host Y can be access-controlled at the traffic entry point, Switch A.
78-16156-01
Purpose
Enter global configuration mode.
Apply the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
Display the access list configuration.
(Optional) Save your entries in the configuration file.
Wiring Closet Configuration, page 27-33
Denying Access to a Server on Another VLAN, page 27-35
Figure
Catalyst 3560 Switch Software Configuration Guide
Configuring VLAN Maps
27-4, assume that Host X
27-33