28-33
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-09
Chapter 28 Configuring Network Security with ACLs
Configuring VLAN Maps
Applying a VLAN Map to a VLAN
Beginning in privileged EXEC mode, follow these steps to apply a VLAN map to one or more VLANs:
Note You cannot apply a VLAN map to a VLAN on a switch that has ACLs applied to Layer 2 interfaces (port
ACLs).
To remove the VLAN map, use the no vlan filter mapname vlan-list list global configuration command.
This example shows how to apply VLAN map 1 to VLANs 20 through 22:
Switch(config)# vlan filter map 1 vlan-list 20-22
Using VLAN Maps in Your Network
This section describes some typical uses for VLAN maps and includes these topics:
• Wiring Closet Configuration, page 28-33
• Denying Access to a Server on Another VLAN, page 28-35
Wiring Closet Configuration
In a wiring closet configuration, routing might not be enabled on the Catalyst 3550 switch. In this
configuration, the switch can still support a VLAN map and a QoS classification ACL. In Figure 28-4,
assume that Host X and Host Y are in different VLANs and are connected to wiring closet switches A
and C. Traffic from Host X to Host Y is eventually being routed by Switch B, which has routing enabled.
Traffic from Host X to Host Y can be access-controlled at the traffic entry point, Switch A.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
vlan filter mapname vlan-list list Apply the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID (22), a consecutive list (10-22), or a string
of VLAN IDs (12, 22, 30). Spaces around the comma and hyphen are
optional.
Step 3
show running-config Display the access list configuration.
Step 4
copy running-config startup-config (Optional) Save your entries in the configuration file.
To Next Page
Loading...
Need help?
General
