2-522
Catalyst 6500 Series Switch Command Reference—Release7.6
78-15328-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands
set security acl map
set security acl map
To map an existing VACL to a VLAN, use the set security acl map command.
set security acl map acl_name vlan
Syntax Description
Defaults There are no default ACLs and no default ACL-VLAN m appi ng s.
Command Types Switch command.
Command Modes Privileged.
Usage Guidelines Configurations you make by entering this command are saved in NVRAM. This command does not
require that you enter the commit command. Each VLAN can be mapped to only one ACL of each type
(IP, IPX, and MAC). An ACL can be mapped to a VLAN only after you have comm itt ed th e ACL.
When you enter the ACL name, follow these naming conventions:
•Maximum of 32 characters long and may include a-z, A-Z, 0-9, the d ash character (-), the unde rscore
character (_), and the period character (.)
•Must start with an alpha character and must be unique across all ACLs of all types
•Case sensitive
•Cannot be a number
•Must not be a keyword; keywords to avoid are all, default-action, map, help, and editbuffer
Caution Use the copy command to save the ACL configuration to Flash memory.
Examples This example shows how to map an existing VACL to a VLAN:
Console> (enable) set security acl map IPACL1 1
ACL IPACL1 mapped to vlan 1
Console> (enable)
This example shows the output if you try to map an ACL that has not been committed:
Console> (enable) set security acl map IPACL1 1
Commit ACL IPACL1 before mapping.
Console> (enable)
acl_name Unique name that identifies the list to which the entry belongs.
vlan Number of the VLAN to be mapped to the VACL; valid valu es a re f rom
1 to 1005 and from 1025 to 4094.