vlan access-map troubleshooting

Steve Rodrigue · ‎03-21-2007

Hi,

I just applied an Access-Map on a vlan to filter PPPoE traffic. But, how can I see the drop rate and stuff like that... I checked the Cisco documentation, but I can't find a ny good reference on that subject.

Here is my configuration :

!

mac access-list extended PPPOE-ACL

permit any any 0x8863 0x0

permit any any 0x8864 0x0

!

vlan access-map DROP-PPPOE-AM 10

action drop

match mac address PPPOE-ACL

vlan access-map DROP-PPPOE-AM 20

action forward

!

vlan filter DROP-PPPOE-AM vlan-list 201

The command I found (somewhat useless for the troubleshooting) :

show vlan filter

show vlan acccess-map

show access-lists PPPOE-ACL

Any tips???

bwalchez · ‎03-27-2007

The following command can hekp in some kind

Hostname(config)#sh vlan access-map drop

Steve Rodrigue · ‎03-28-2007

The command you suggested, doesn't exist. The "drop" parameter is actually considered as the Access-Map name (check with the "?").

hostname#sh vlan access-map ?

WORD Access-map name

| Output modifiers

:(

Edison Ortiz · ‎03-28-2007

Steve,

on the acl add the 'log' option at the end.

for instance,

permit ip any any log

will send all traffic to the log process.

You must enable log buffer to store the login locally or logging host to send it to a syslog server.

HTH, if it does please rate my reply.

Thanks

Steve Rodrigue · ‎03-28-2007

"mac access-list extended" doesn't support "log" option. :(