Match (Vlan Access-Map) - Cisco Nexus 7000 Series Command Reference Manual

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

match (VLAN access-map)

To specify an access control list (ACL) for traffic filtering in a VLAN access map, use the match command.

To remove a match command from a VLAN access map, use the no form of this command.

match {ip| ipv6| mac} address access-list-name

no match {ip| ipv6| mac} address access-list-name

Syntax Description

address access-list-name

Command Default

Command Modes

VLAN access-map configuration

Command History

Usage Guidelines

You can specify one or more match commands per entry in a VLAN access map.

By default, the device classifies traffic and applies IPv4 ACLs to IPv4 traffic, IPv6 ACLs to IPv6 traffic, and

MAC ACLs to all other traffic.

This command does not require a license.

This example shows how to create a VLAN access map named vlan-map-01 and add two entries that each

have two match commands and one action command:

switch(config-access-map)# vlan access-map vlan-map-01

switch(config-access-map)# match ip address ip-acl-01

switch(config-access-map)# action forward

switch(config-access-map)# match mac address mac-acl-00f

switch(config-access-map)# vlan access-map vlan-map-01

switch(config-access-map)# match ip address ip-acl-320

Specifies that the ACL is an IPv4 ACL.

Specifies that the ACL is an IPv6 ACL.

Specifies that the ACL is a MAC ACL.

Specifies the ACL by name, which can be up to 64

alphanumeric, case-sensitive characters.

Modification

The ipv6 keyword was added.

This command was introduced.

Cisco Nexus 7000 Series Security Command Reference

match (VLAN access-map)