Configuring And Storing Vacls And Qos Acls In Flash Memory - Cisco WS-C6506 Software Manual

Configuring and Storing VACLs and QoS ACLs in Flash Memory

An ACL with the VLAN match option can only be mapped to a port.
Note
Note All Cisco IOS ACLs become inoperable when the set acl mac-packet-classify vlans command is used.
The EtherType has been extended to include an IP version 4 option to allow you to specifically target the
IP version 4 packets using the MAC ACL lookup. If you select the IP version 4 option, you must ensure
that the corresponding VLAN is enabled using the set acl mac-packet-classify vlans command. The IP
version 4 option was added as follows:
Console> (enable) set security acl mac macacl1 permit any any ?
<0x0, 0x0600 - 0xffff>
ipv4
ipx-arpa
.......
Console> (enable)
This example shows the MAC-based ACL lookup CLI:
Console> (enable) set acl mac-packet-classify 5
Enabled mac-packet-classify on vlan(s) 5.
Warning:IP RACLs, VACLs & some IP features will be ineffective on these vlans.
Console> (enable) show acl mac-packet-classify
Feature enabled on source vlan(s) 1,5.
Console> (enable) clear acl mac-packet-classify 5
Disabled mac-packet-classify on vlan(s) 5.
Console> (enable)
The all keyword with the set and clear commands allow you to specify all VLANs.
Note
Configuring and Storing VACLs and QoS ACLs in Flash Memory
This section describes how to configure and store the VACLs and the QoS ACLs in flash memory instead
of NVRAM. Before this feature, all configuration information was stored in NVRAM. With the addition
of the QoS and security ACLs (VACLs), NVRAM could become full. In addition to limiting the ACL
configuration, filling up NVRAM can cause problems when you attempt to upgrade from one software
version to another.
In most cases, the 512-KB NVRAM is sufficient for storing the VACLs and QoS ACLs; all ACL
Note
configurations are stored in NVRAM by default.
This section describes these tasks:
•
•
•
•
•
•
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
15-64
Automatically Moving the VACL and QoS ACL Configuration to Flash Memory, page 15-65
Manually Moving the VACL and QoS ACL Configuration to Flash Memory, page 15-65
Running with the VACL and QoS ACL Configuration in Flash Memory, page 15-67
Moving the VACL and QoS ACL Configuration Back to NVRAM, page 15-67
Redundancy Synchronization Support, page 15-67
Interacting with High Availability, page 15-68
Match an EtherType value
(0x8000)
(0x8137) Use 0xffff to match on non-arpa IPX
Chapter 15 Configuring Access Control
OL-8978-04