扫一扫
分享文章到微信
扫一扫
关注官方公众号
至顶头条
作者：中国IT实验室 2007年8月24日
关键字：
在本页阅读全文(共2页)
In this example， the VLAN map has a default action of drop for MAC packets and a default action of forward for IP packets. Used with MAC extended access lists good-hosts and good-protocols， the map will have the following results：
？ Forward MAC packets from hosts 0000.0c00.0111 and 0000.0c00.0211
？ Forward MAC packets with decnet-iv or vines-ip protocols
？ Drop all other non-IP packets
？ Forward all IP packets
| Switch(config)# mac access-list extended good-hosts Switch(config-ext-macl)# permit host 000.0c00.0111 any Switch(config-ext-macl)# permit host 000.0c00.0211 any Switch(config-ext-nacl)# exit Switch(config)# mac access-list extended good-protocols Switch(config-ext-macl)# permit any any decnet-ip Switch(config-ext-macl)# permit any any vines-ip Switch(config-ext-nacl)# exit Switch(config)# vlan access-map drop-mac-default 10 Switch(config-access-map)# match mac address good-hosts Switch(config-access-map)# action forward Switch(config-access-map)# exit Switch(config)# vlan access-map drop-mac-default 20 Switch(config-access-map)# match mac address good-protocols Switch(config-access-map)# action forward |
2：将vlan map 指定到一个vlan 上
Step 1 configure terminal
Step 2 vlan filter mapname vlan-list list Apply the VLAN map to one or more VLAN IDs.
The list can be a single VLAN ID （22）， a consecutive list （10-22）， or a string of VLAN IDs （12， 22， 30）。 Spaces around the comma and hyphen are optional.
To remove the VLAN map， use the no vlan filter mapname vlan-list list global configuration command.
Example 1
If you do not want HTTP traffic switched from Host X to Host Y， you can configure a VLAN map on
Switch A to drop all HTTP traffic from Host X （IP address 10.1.1.32） to Host Y （IP address 10.1.1.34）at Switch A and not bridge it to Switch B.
| 1、define the IP access list http that permits (matches) any TCP traffic on the HTTP port. Switch(config)# ip access-list extended http Switch(config-ext-nacl)# permit tcp host 10.1.1.32 host 10.1.1.34 eq www Switch(config-ext-nacl)# exit 2、create VLAN access map map2 so that traffic that matches the http access list is dropped and all other IP traffic is forwarded. Switch(config)# vlan access-map map2 10 Switch(config-access-map)# match ip address http Switch(config-access-map)# a |
如果您非常迫切的想了解IT领域最新产品与技术信息，那么订阅至顶网技术邮件将是您的最佳途径之一。
京公网安备 11010802021500号