2-639
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set security acl map
If per-VLAN statistics are enabled on a VLAN, subsequent maps configured on the same VLAN will
also have per-VLAN statistics enabled. If per-VLAN statistics are disabled on a VLAN, previous maps
configured on the same VLAN will also have per-VLAN statistics disabled.
For example, if you enter the set security acl map ip1 1 statistics enable command followed by the set
security acl map mac1 1 command, the MAC 1 ACL will also have per-VLAN statistics enabled.
If you enter the set security acl map ip1 1 statistics enable command followed by the set security acl
map mac1 1 statistics disable command, the ip1 ACL will also have per-VLAN statistics disabled.
Note In the per-VLAN mode, label sharing is disabled resulting in more l abe ls bei ng use d.
Note With a PFC2, the counters report if a particular ACE was hit during a 300 ms window, but the counters
do not indicate how much traffic hit the entry. For e xample, if you ha ve tw o flows where one flo w is 1000
packets per second and the second flow is 10 packets per second, both flows return the same result on a
PFC2. The PFC3 and later PFCs do not have this limitation.
Examples This example shows how to map an existing ACL to a VLAN:
Console> (enable) set security acl map IPACL1 1
ACL IPACL1 mapped to vlan 1
Console> (enable)
This example shows the output if you try to map an ACL that has not been committed:
Console> (enable) set security acl map IPACL1 1
Commit ACL IPACL1 before mapping.
Console> (enable)
This example shows the output if you try to map an ACL that is already mapped to a VL AN for the ACL
type (IP, IPX, or MAC):
Console> (enable) set security acl map IPACL2 1
Mapping for this type already exists for this VLAN.
Console> (enable)
This example shows how to map an ACL to a port:
Console> (enable) set security acl map ipacl1 3/1
Mapping in progress.
ACL ipacl1 is successfully mapped to port(s) 3/1.
Console> (enable)
This example shows how to enable ACL statistics on a per-VLAN basis:
Console> (enable) set security acl map ACL1 1 statistics enable
Mapping in progress.
ACL ACL1 successfully mapped to VLAN 1.
Console> (enable)