Configuring VLAN ACLs
Command or Action
switch(config)# vlan filter acl-mac-map vlan-list
1-20,26-30
switch(config)#
Step 3
(Optional) show running-config aclmgr
Example:
switch(config)# show running-config aclmgr
Step 4
(Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Verifying the VACL Configuration
To display VACL configuration information, perform one of the following tasks:
Command
show running-config aclmgr
[all]
show startup-config aclmgr
[all]
show vlan filter
show vlan access-map
Monitoring and Clearing VACL Statistics
To monitor or clear VACL statistics, use one of the commands in this table.
Command
show vlan access-list
clear vlan access-list counters
Purpose
Displays the ACL configuration.
Copies the running configuration to the startup
configuration.
Purpose
Displays the ACL configuration, including the VACL-related configuration.
Note
This command displays the user-configured ACLs in the running
configuration. The all option displays both the default
(CoPP-configured) and user-configured ACLs in the running
configuration.
Displays the ACL startup configuration.
Note
This command displays the user-configured ACLs in the startup
configuration. The all option displays both the default
(CoPP-configured) and user-configured ACLs in the startup
configuration.
Displays information about VACLs that are applied to a VLAN.
Displays information about VLAN access maps.
Purpose
Displays the VACL configuration. If the VLAN access-map includes the
statistics per-entry command, the show vlan access-list command output
includes the number of packets that have matched each rule.
Clears statistics for VACLs.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Verifying the VACL Configuration
301