“:::How to Filter The Traffic with VLAN Access Maps (VACL) on a Switch Catalyst:::”

Otro más !!! ideasnet

A VLAN Access-map allows us to filter incoming and outgoing traffic in a switch Vlan. VLAN access-map configuration is very similar to the Route-map configuration. In this example I’ve set the VACL on SW1 to deny a Telnet session to R2 and permit at all rest traffic to reach that router.

SWITCH-1

ip access-list extended  restrict_telnet_R2

  permit tcp host 192.168.10.1 host 192.168.10.2 eq 23 !

 vlan access-map VACL 10

  action drop

  match ip address restrict_telnet_R2 !

vlan access-map VACL 20 

  action forward !

We can use VACL also to decide how to split the traffic creating a manual Load-Balancing.