From: Hashiru Aminu (hashng@gmail.com)
Date: Tue Feb 28 2006 - 18:33:55 GMT-3
Hi All,
Playing around with VLAN Maps and got to a point that I wann know if my VLAN
map is configured properly as u all know know how to verify your configs is
all in the way to CCIE, could some one give me a command that I can verify
the functionality of my VLAN map. I have this command sh VLAN map as shown
below , but does not give any infor . any debug command or so.
My second issue with VLAN maps is that is it a "match all" or "match any"
logic.
i.e if I configure as below :
ip access-list extended IPONLYEX
permit ip any any
mac access-list extended ARP
permit any any 0x806 0x0
mac access-list extended STP
permit any any 0x4242 0x0
!
VLAN access-map HASH 10
action forward
match ip address IPONLYEX
match mac address ARP
VLAN access-map HASH 20
action drop
VLAN filter HASH VLAN-list 56
The only show command I could find to confirm VLAN maps
(it does not show you what VLANS the Map is applied to )
sw2#sh VLAN access-map
VLAN access-map "HASH" 10
Match clauses:
ip address: IPONLYEX
Action:
forward
VLAN access-map "HASH" 20
Match clauses:
mac address: ARP
Action:
forward
VLAN access-map "HASH" 30
Match clauses:
mac address: STP
Action:
forward
VLAN access-map "HASH" 40
Match clauses:
Action:
Drop
TIA
Hashiru
This archive was generated by hypermail 2.1.4 : Wed Mar 01 2006 - 11:28:18 GMT-3