User Manual

[Parameter]
access-map-name : Single-byte alphanumeric characters and single-byte symbols (256 characters or less)
Access map name
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Create a VLAN access map with the name specified by access-map-name, and then move to VLAN access map mode in order
to make VLAN access map settings.
If this command is executed with the "no" syntax, the specified VLAN access map is deleted.
[Note]
To return from VLAN access map mode to global configuration mode, use the exit command. To return to priviledged EXEC
mode, use the end command.
[Example]
Create a VLAN access map named "VAM001", and move to VLAN access map mode.
SWP1(config)#vlan access-map VAM001
SWP1(config-vlan-access-map)#
11.1.6 Set access list for VLAN access map
[Syntax]
match type access-list list-id
no match type access-list list-id
[Parameter]
type : Type of access list to use
Setting value Description
ip Use an IPv4 access list
mac Use a MAC access list
list-id : <1-99>, <1300-1999>, <100-199>, <2000-2699>
Access list number specified by the access-list command
You must specify the number used by the access list specified by type
[Initial value]
none
[Input mode]
VLAN access map mode
[Description]
Sets the access list that is applied to the corresponding VLAN access map.
If this command is executed with the "no" syntax, the specified access list is deleted from the corresponding VLAN access map.
[Note]
Only one access list can be specified for one VLAN access map.
You can use the show vlan access-map command to view the setting.
[Example]
Create a VLAN access map named "VAM001", and specify an access list that allows packets from 192.168.0.1.
SWP1(config)#access-list 2 permit 192.168.0.1 0.0.0.255
SWP1(config)#vlan access-map VAM001
SWP1(config-vlan-access-map)#match ip access-list 2
Command Reference | L2 switching function | 123