136 G8264 Application Guide for ENOS 8.4VLAN MapsA VLAN map (VMap) is an ACL that can be assigned to a VLAN or VM grouprather than to a switch port as with IPv4 ACLs. This is particularly useful in avirtualized environment where traffic filtering and metering policies must followvirtual machines (VMs) as they migrate between hypervisors.Note: VLAN maps for VM groups are not supported simultaneously on the sameports as vNICs (see Chapter 19, “Virtual NICs”).The G8264 supports up to 128 VMaps.Individual VMap filters are configured in the same fashion as IPv4 ACLs, exceptthat VLANs cannot be specified as a filtering criteria (unnecessary, since the VMapare assigned to a specific VLAN or associated with a VM group VLAN).VMaps are configured using the following ISCLI configuration command path:Once a VMap filter is created, it can be assigned or removed using the followingconfiguration commands: For regular VLAN, use config‐vlan mode: For a VM group (see “VM Group Types” on page 342), use the globalconfiguration mode:Note: Each VMap can be assigned to only one VLAN or VM group. However, eachVLAN or VM group may have multiple VMaps assigned to it.When the optional serverports or non serverports parameter is specified,the action to add or remove the VMap is applied for either the switch server ports(serverports) or uplink ports (non serverports). If omitted, the operationwill be applied to all ports in the associated VLAN or VM group.RS G8264(config)# access control vmap ID> ?action Set filter actionegress port Set to filter for packets egressing this portethernet Ethernet header optionsipv4 IP version 4 header optionsmeter ACL metering configurationmirror Mirror optionspacket format Set to filter specific packet format typesre mark ACL re mark configurationstatistics Enable access control list statisticstcp udp TCP and UDP filtering optionsRS G8264(config)# vlan ID>RS G8264(config vlan)# [no] vmap ID> [serverports|non serverports]RS G8264(config)# [no] virt vmgroup vmap ID>[serverports|non serverports]
