VLAN Access control list (VACL)

VACL is used to permit and deny the traffic within the VLAN itself. Here is the example showing how this feature works.

Example

!

!

vlan access-map NO_HTTP 10

 action drop

 match ip address 111

vlan access-map NO_HTTP 20

 action forward

!

vlan filter NO_HTTP vlan-list 10

! 

!

access-list 111 deny   tcp any any eq www

access-list 111 permit ip any any