VLAN Access-map Logic

[kfarrington]

Hi Guys,

Can anyone tell me what happens to the respective traffic if I have the following configuration?

I am a little confused between the action forward/drop and permit/deny meanings?

vlan access-map TEST 10

match ip address TEST-ACL

action forward

!

vlan filter TEST vlan-list 1-100

!

!

ip access-list extended TEST-ACL

permit udp any host 224.0.0.2 eq 1985

deny igmp any any

permit ip any any

Many thx indeed,

Ken

[Jon Marshall · Accepted solution]

Ken

The actions forward and drop are pretty self explanatory.

What your rxample is doing is

1) forwarding HSRP

2) dropping any IGMP traffic

3) forwarding all other traffic

when the traffic matches the deny clause the packets are not subject to the action that you have specified.

Jon

[kfarrington]

Hi Jon,

Many thx for the fast reply mate :)

Top man

Ken