Hi,
We have created a access-map on our VTP server switch, see below.
How do we get this list over to our VTP workstation switches?
The VLAN is working on the workstation VTP switches, but the access-map is not ok.
The trunk port have been setup with:
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 2-409
switchport mode trunk
udld port
The spanning-tree config:
spanning-tree mode rapid-pvst
spanning-tree extend system-id
vlan access-map WLAN-GUEST 10
action forward
match ip address Guest-ACL-AP-10
vlan access-map WLAN-GUEST 20
action drop
match ip address Guest-ACL-AP-20
vlan access-map WLAN-GUEST 30
action forward
match ip address Guest-ACL-AP-30
ip access-list extended Guest-ACL-AP-10
remark This is a vlan ACL-map to Cisco Access Point for guest
permit udp 10.10.9.0 0.0.0.255 host 10.12.1.41 eq bootpc
permit udp 10.10.9.0 0.0.0.255 host 10.12.1.41 eq bootps
permit udp 10.10.9.0 0.0.0.255 host 10.12.1.42 eq bootpc
permit udp 10.10.9.0 0.0.0.255 host 10.12.1.42 eq bootps
ip access-list extended Guest-ACL-AP-20
remark This is a vlan ACL-map to Cisco Access Point for guest
deny ip 10.102.9.0 0.0.0.255 10.0.0.0 0.255.255.255
deny ip 10.102.9.0 0.0.0.255 172.20.0.0 0.0.255.255
ip access-list extended Guest-ACL-AP-30
remark This is a vlan ACL-map to Cisco Access Point for guest
permit ip any any
vlan filter WLAN-GUEST vlan-list 9
//Jan
