76. VACL of switch configuration experiment
1. Analysis of data forwarding process of switch
2. Experimental topology
3. Configure VACL based on IP
3560 configuration
Access-list 1 permit 192.168.120.210
Vlan access-map VACL 10
Action drop
Match ip address 1
Vlan filter VACL vlan-list 1
4. Configure VACL based on MAC
3560 configuration
Mac access-list extended VACL_MAC
Permit host 94de.801d.3277 any
Vlan access-map VACL 10
Action drop
Match mac address VACL_MAC
Vlan filter VACL vlan-list 1
Use arp-d to clear the previous ARP buffer before testing, or you will see that ping still works.
