Cisco 7604 User Manual

35-6
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 35 Configuring VLAN ACLs
Configuring VACLs
When defining a VLAN access map, note the following information:
• To insert or modify an entry, specify the map sequence number.
• If you do not specify the map sequence number, a number is automatically assigned.
• You can specify only one match clause and one action clause per map sequence.
• Use the no keyword with a sequence number to remove a map sequence.
• Use the no keyword without a sequence number to remove the map.
See the “VLAN Access Map Configuration and Verification Examples” section on page 35-9.
Configuring a Match Clause in a VLAN Access Map Sequence
To configure a match clause in a VLAN access map sequence, perform this task:
When configuring a match clause in a VLAN access map sequence, note the following information:
• You can select one or more ACLs.
• VACLs attached to WAN interfaces support only standard and extended Cisco IOS IP ACLs.
• Use the no keyword to remove a match clause or specified ACLs in the clause.
• For information about named MAC-Layer ACLs, refer to the “Configuring MAC ACLs” section on
page 41-67.
• For information about Cisco IOS ACLs, refer to the Cisco IOS Security Configuration Guide,
Release 12.2, “Traffic Filtering and Firewalls,” at this URL:
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/fsecur_c.html
See the “VLAN Access Map Configuration and Verification Examples” section on page 35-9.
Router(config)# no vlan access-map map_name 0-65535
Deletes a map sequence from the VLAN access map.
Router(config)# no vlan access-map map_name
Deletes the VLAN access map.
Command Purpose
Command Purpose
Router(config-access-map)# match {ip address {1-199 |
1300-2699 |
acl_name } | ipx address {800-999 |
acl_name }| mac address acl_name }
Configures the match clause in a VLAN access map sequence.
Router(config-access-map)# no match {ip address
{1-199 | 1300-2699 |
acl_name } | ipx address {800-999
|
acl_name }| mac address acl_name }
Deletes the match clause in a VLAN access map sequence.

Cisco 7604 Specifications

General

Brand	Cisco
Model	7604
Category	Network Router
Language	English