vlan access-map troubleshooting
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-21-2007 07:35 AM - edited 03-03-2019 04:14 PM
Hi,
I just applied an Access-Map on a vlan to filter PPPoE traffic. But, how can I see the drop rate and stuff like that... I checked the Cisco documentation, but I can't find a ny good reference on that subject.
Here is my configuration :
!
mac access-list extended PPPOE-ACL
permit any any 0x8863 0x0
permit any any 0x8864 0x0
!
vlan access-map DROP-PPPOE-AM 10
action drop
match mac address PPPOE-ACL
vlan access-map DROP-PPPOE-AM 20
action forward
!
vlan filter DROP-PPPOE-AM vlan-list 201
The command I found (somewhat useless for the troubleshooting) :
show vlan filter
show vlan acccess-map
show access-lists PPPOE-ACL
Any tips???
- Labels:
-
LAN Switching
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2007 07:11 AM
The following command can hekp in some kind
Hostname(config)#sh vlan access-map drop
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2007 05:40 AM
The command you suggested, doesn't exist. The "drop" parameter is actually considered as the Access-Map name (check with the "?").
hostname#sh vlan access-map ?
WORD Access-map name
| Output modifiers
:(
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2007 07:54 AM
Steve,
on the acl add the 'log' option at the end.
for instance,
permit ip any any log
will send all traffic to the log process.
You must enable log buffer to store the login locally or logging host to send it to a syslog server.
HTH, if it does please rate my reply.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2007 09:44 AM
"mac access-list extended" doesn't support "log" option. :(
