RE: VLAN Filtering

From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Sat Aug 05 2006 - 16:00:59 ART


Hi Naveen,

I think that could be configured this way

Sw1(config)#mac access-list extended test

Sw1(config-ext-macl)#permit any any cos 1

%Warning: CoS is only checked by hardware. Packets forwarded

or bridged by software are treated as having CoS of 0

in ACL matches. !!!! nice warning BTW, could anyone explain???

vlan access-map vlan_inside 10

 action forward

 match ip address inside_devices

vlan access-map vlan_inside 20

 action drop

 match mac address TEST

vlan access-map vlan_inside 30

 action forward

-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En nombre de Naveen
Gupta
Enviado el: Sabado, 05 de Agosto de 2006 02:52 p.m.
Para: ccielab@groupstudy.com
Asunto: VLAN Filtering

Hi all,

I am tying to do vlan filtering for vlan 11 and vlan

100. How can I filter out packets with a Cos value of

1 while doing vlan filtering.

!

ip access-list extended inside_devices

permit ip host 172.16.1.100 any

permit ip host 172.16.1.15 any

permit ip host 172.16.2.15 any

permit ip host 172.16.2.10 any

!

vlan access-map vlan_inside 10

match ip address inside_devices

action forward

!

vlan filter vlan_inside filter-list 100 , 11

!

Any help ??

Thanks,

Naveen



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:56 ART