User Manual

9.1.15 Set VLAN access map filter
[Syntax]
vlan filter access-map-name vlan-id [direction]
no vlan filter access-map-name vlan-id [direction]
[Parameter]
access-map-name : Single-byte alphanumeric characters and single-byte symbols(256 characters or less)
Access map name specified by the vlan access-map command
vlan-id : <1-4094>
VLAN ID set to the "enable" status by the vlan command
direction : Specifies the direction of applicable frames. Applied to incoming frames when omitted
Setting value Description
in Apply to received frames
out Apply to transmitted frames
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Sets the VLAN access map filter for the specified VLAN.
If this command is executed with the "no" syntax, the VLAN access map filter for the specified VLAN is deleted.
[Note]
It is not possible to specify this command for a VLAN ID that is set to the "disable" state.
Only one VLAN access map for each direction can be registered for incoming frames (in) and for outgoing frames (out) on the
same interface.
Note that VLAN access maps for which the following access list is set cannot be applied to outgoing frames (out).
• MAC access list
•
As a restriction, an IPv4 access list for which the port number range (range X Y) is specified cannot be applied to
transmitted frames (out).
[Example]
Creates a VLAN access map named VAM001, specifies an access list that denies packets beginning from 192.168.0.1, and then
applies VAM001 to incoming frames of VLAN #1000.
SWR2311P(config)#vlan database
SWR2311P(config-vlan)#vlan 1000
SWR2311P(config-vlan)#exit
SWR2311P(config)#access-list 2 deny any 192.168.0.1/32 any
SWR2311P(config)#vlan access-map VAM001
SWR2311P(config-vlan-access-map)#match access-list 2
SWR2311P(config-vlan-access-map)#exit
SWR2311P(config)#vlan filter VAM001 1000 in
9.1.16 Show VLAN access map
[Syntax]
show vlan access-map
[Input mode]
unprivileged EXEC mode, priviledged EXEC mode
[Description]
Shows the registered VLAN access map.
The following items are shown.
•
Name of the VLAN access map
• Access list applied to VLAN access map
Command Reference | Traffic control | 245