2-457
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set pbf-map
commit security acl ip PBF_MAP_ACL_12
set security acl map PBF_MAP_ACL_11 11
set security acl map PBF_MAP_ACL_12 12
Each entry in the ACL that is added by the set pbf-map command is inserted before the default permit
ip any any ACE.
If you want to add entries other then redirect ACEs to the adjacency table, use the set security acl ip
PBF_MAP_ACL_(VLAN_ID) command.
Once the map is created between the client and gateway lists by entering the set pbf-map {client_list}
{gw_name} command, no more mapping can be added for these two lists. Subsequent clients and
gateways can be added.
For more information about using the set pfb client, set pbf gw, and set pbf-map commands, refer to
the “Enhancements to PBF Configuration” section of Chapter 16, “Configuring A ccess Control,” in the
Catalyst 6500 Series Software Configuration Guide.
Examples This example shows how to specify a PBF_MAP_ACL:
Console> (enable) set pbf-map 1.1.1.1 0-0-0-0-0-1 11 2.2.2.2 0-0-0-0-0-2 22
Commit operation successful.
Commit operation successful.
ACL 'PBF_MAP_ACL_11' successfully committed.
Console> (enable)
ACL PBF_MAP_ACL_11 successfully mapped to VLAN 11.
Console> (enable)
ACL 'PBF_MAP_ACL_22' successfully committed.
Console> (enable)
ACL PBF_MAP_ACL_22 successfully mapped to VLAN 22.
Console> (enable) Operation successful.
Console> (enable)
This example show how to map a list of hosts to a gateway:
Console> (enable) set pbf-map cl1 gw1
.ccl1 editbuffer modified. Use 'commit' command to apply changes.
.ggw1 editbuffer modified. Use 'commit' command to apply changes.
.ccl1 editbuffer modified. Use 'commit' command to apply changes.
.ggw1 editbuffer modified. Use 'commit' command to apply changes.
.ccl1 editbuffer modified. Use 'commit' command to apply changes.
.ggw1 editbuffer modified. Use 'commit' command to apply changes.
Console> (enable) ACL commit in progress.
Console> (enable) ACL commit in progress.
ACL '.ccl1' successfully committed.
Console> (enable)
ACL '.ggw1' successfully committed.
Console> (enable) Mapping in progress.
Please configure VLAN 101.
ACL .ccl1 successfully mapped to VLAN 101.
Console> (enable) Mapping in progress.
Please configure VLAN 102.
ACL .ggw1 successfully mapped to VLAN 102.
Console> (enable)