Acl Vlan Group Commands; Acl-Vlan-Group - Dell Z9500 Reference Manual

ACL VLAN Group Commands

Use the commands in this section to configure ACL VLAN groups and CAM optimization for ACLs applied
to VLAN groups.

acl-vlan-group

Create an ACL VLAN group.
Term heading Description heading
Syntax
acl-vlan-group group name
To remove an ACL VLAN group, use the no acl-vlan-group group name
command.
Parameters
group-name
Default None
Command Modes ACL-VLAN-GROUP CONFIGURATION
Command History
Version
9.5(0.1)
9.3(0.0)
Usage Information You can configure up to eight different ACL VLAN groups at a time on the switch.
When you configure an ACL VLAN group, you enter ACL VLAN Group configuration
mode.
To avoid the problem of excessive consumption of CAM area, you can configure
ACL VLAN groups that combines all the VLANs that are applied with the same ACL
in a single group. A unique identifier for each of ACL attached to the VLAN is used
as a handle or locator in the CAM area instead of the VLAN id. This method of
processing significantly reduces the number of entries in the CAM area and saves
memory space in CAM.
You can create an ACL VLAN group and attach the ACL with the VLAN members.
Optimization is applicable only when you create an ACL VLAN group. If you apply
an ACL separately on the VLAN interface, each ACL maps with the VLAN and
increased CAM space utilization occurs.
Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-
VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group
functionality.
252
Enter the name of the ACL VLAN group (140 characters
maximum).
Description
Introduced on the Z9500.
Introduced on the S4810, S4820T, and Z9000.
Access Control Lists (ACL)