HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 338

VACLs and Actions Configuring VACLs VACLs and Actions In access map configuration mode, you use the action command to specify one of the following actions: • Forward-Sends the traffic to the destination determined by normal operation of the switch. • Drop-Drops the traffic. Statistics The switch can maintain global statistics for each rule in a VACL. If a VACL is applied to multiple VLANs, the maintained rule statistics are the sum of packet matches (hits) on all the interfaces on which that VACL is applied. Note The Cisco Nexus 5000 Series switch does not support interface-level VACL statistics. For each VLAN access map that you configure, you can specify whether the switch maintains statistics for that VACL. This allows you to turn VACL statistics on or off as needed to monitor traffic filtered by a VACL or to help troubleshoot VLAN access-map configuration. Configuring VACLs Creating or Changing a VACL You can create or change a VACL. Creating a VACL includes creating an access map that associates an IP ACL or MAC ACL with an action to be applied to the matching traffic. To create or change a VACL, perform this task: Procedure Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Command or Action switch# configure terminal Purpose Enters configuration mode. switch(config)# vlan access-map map-name Enters access map configuration mode for the access map specified. switch(config-access-map)# match ip address ip-access-list Specifies an IPv4 and IPV6 ACL for the map. switch(config-access-map)# match mac Specifies a MAC ACL for the map. address mac-access-list switch(config-access-map)# action {drop Specifies the action that the switch applies to | forward} traffic that matches the ACL. switch(config-access-map)# [no] statistics (Optional) Specifies that the switch maintains global statistics for packets matching the rules in the VACL. Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 292 OL-16597-01