Specifications

2-233
Cisco ME 3400 Ethernet Access Switch Command Reference
OL-9640-07
Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
match (access-map configuration)
match (access-map configuration)
Use the match access-map configuration command to set the VLAN map to match packets against one
or more access lists. Use the no form of this command to remove the match parameters.
match {ip address {name | number} [name | number] [name | number]...} | {mac address {name}
[name] [name]...}
no match {ip address {name | number} [name | number] [name | number]...} | {mac address
{name} [name] [name]...}
Syntax Description
Defaults The default action is to have no match parameters applied to a VLAN map.
Command Modes Access-map configuration
Command History
Usage Guidelines You enter access-map configuration mode by using the vlan access-map global configuration command.
You must enter one access list name or number; others are optional. You can match packets against one
or more access lists. Matching any of the lists counts as a match of the entry.
In access-map configuration mode, use the match command to define the match conditions for a VLAN
map applied to a VLAN. Use the action command to set the action that occurs when the packet matches
the conditions.
Packets are matched only against access lists of the same protocol type; IP packets are matched against
IP access lists, and all other packets are matched against MAC access lists.
Both IP and MAC addresses can be specified for the same map entry.
Examples This example shows how to define and apply a VLAN access map vmap4 to VLANs 5 and 6 that will
cause the interface to drop an IP packet if the packet matches the conditions defined in access list al2.
Switch(config)# vlan access-map vmap4
Switch(config-access-map)# match ip address al2
Switch(config-access-map)# action drop
Switch(config-access-map)# exit
Switch(config)# vlan filter vmap4 vlan-list 5-6
ip address Set the access map to match packets against an IP address access list.
mac address Set the access map to match packets against a MAC address access list.
name Name of the access list to match packets against.
number Number of the access list to match packets against. This option is not valid for MAC
access lists.
Release Modification
12.2(25)EX This command was introduced.