topic Re: VLAN Access-map Logic in Network Security https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275473#M772279 <HTML><HEAD></HEAD><BODY><P>Ken</P><P></P><P>The actions forward and drop are pretty self explanatory.</P><P></P><P>What your rxample is doing is </P><P></P><P>1) forwarding HSRP</P><P>2) dropping any IGMP traffic</P><P>3) forwarding all other traffic</P><P></P><P>when the traffic matches the deny clause the packets are not subject to the action that you have specified.</P><P></P><P>Jon</P></BODY></HTML> Wed, 21 Oct 2009 14:54:04 GMT Jon Marshall 2009-10-21T14:54:04Z VLAN Access-map Logic https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275472#M772261 <P>Hi Guys,</P><P></P><P>Can anyone tell me what happens to the respective traffic if I have the following configuration?</P><P></P><P>I am a little confused between the action forward/drop and permit/deny meanings?</P><P></P><P>vlan access-map TEST 10</P><P> match ip address TEST-ACL</P><P> action forward</P><P>!</P><P>vlan filter TEST vlan-list 1-100</P><P>!</P><P>!</P><P>ip access-list extended TEST-ACL</P><P> permit udp any host 224.0.0.2 eq 1985</P><P> deny igmp any any</P><P> permit ip any any</P><P></P><P></P><P>Many thx indeed,</P><P>Ken</P> Mon, 11 Mar 2019 16:28:57 GMT https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275472#M772261 kfarrington 2019-03-11T16:28:57Z Re: VLAN Access-map Logic https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275473#M772279 <HTML><HEAD></HEAD><BODY><P>Ken</P><P></P><P>The actions forward and drop are pretty self explanatory.</P><P></P><P>What your rxample is doing is </P><P></P><P>1) forwarding HSRP</P><P>2) dropping any IGMP traffic</P><P>3) forwarding all other traffic</P><P></P><P>when the traffic matches the deny clause the packets are not subject to the action that you have specified.</P><P></P><P>Jon</P></BODY></HTML> Wed, 21 Oct 2009 14:54:04 GMT https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275473#M772279 Jon Marshall 2009-10-21T14:54:04Z Re: VLAN Access-map Logic https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275474#M772313 <HTML><HEAD></HEAD><BODY><P>Hi Jon,</P><P></P><P>Many thx for the fast reply mate <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Top man </P><P></P><P>Ken</P></BODY></HTML> Wed, 21 Oct 2009 14:55:37 GMT https://community.cisco.com/t5/network-security/vlan-access-map-logic/m-p/1275474#M772313 kfarrington 2009-10-21T14:55:37Z