Set Access List For Vlan Access Map; Set Vlan Access Map Filter - Yamaha L2 Command Reference Manual

[Input mode]
global configuration mode
[Description]
Create a VLAN access map with the name specified by access-map-name, and then move to VLAN access map mode in order
to make VLAN access map settings.
If this command is executed with the "no" syntax, the specified VLAN access map is deleted.
[Note]
To return from VLAN access map mode mode to global configuration mode, use the exit command. To return to priviledged
EXEC mode, use the end command.
[Example]
Create a VLAN access map named "VAM001", and move to VLAN access map mode.
SWR2311P(config)#vlan access-map VAM001
SWR2311P(config-vlan-access-map)#

9.1.14 Set access list for VLAN access map

[Syntax]
match access-list list-id
no match access-list list-id
[Parameter]
list-id
[Initial value]
none
[Input mode]
VLAN access map mode
[Description]
Sets the access list that is applied to the corresponding VLAN access map.
If this command is executed with the "no" syntax, the specified access list is deleted from the corresponding VLAN access map.
[Note]
Only one access list can be specified for one VLAN access map.
You can use the show vlan access-map command to view the setting.
[Example]
Create a VLAN access map named "VAM001", and specify an access list that denies packets from 192.168.0.1.
SWR2311P(config)#access-list 2 deny any 192.168.0.1/32 any
SWR2311P(config)#vlan access-map VAM001
SWR2311P(config-vlan-access-map)#match access-list 2

9.1.15 Set VLAN access map filter

[Syntax]
vlan filter access-map-name vlan-id
no vlan filter access-map-name vlan-id
[Parameter]
access-map-name
vlan-id
[Initial value]
none
: <1-2000>, <2001-3000>, <3001-4000>
Access list number specified by the access-list command
: Single-byte alphanumeric characters and single-byte symbols(256 characters or less)
Access map name specified by the vlan access-map command
: <1-4094>
VLAN ID set to the "enable" status by the vlan command
Command Reference | Traffic control | 225