Adding vlan to VACL

Unanswered Question
Jan 27th, 2009

Currently we are filtering data on vlan 233 and 237. Want to add vlan 321 to filter.

Here is my current config:

vlan filter Servers_IN vlan-list 233,237

My question is can I just add the vlan to the filter like this:

vlan filter Servers_IN vlan-list 233,237,321

Or do I have to remove the filter and then rebuild it?


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Mohamed Sobair Tue, 01/27/2009 - 12:01


Besides adding vlan 321 to the Vlan Filter list, u need to have additional config In (Vlan Access-map) configuration, The modified config should contain new ACL statment and its action should whether be Forwarded or denied.



meadman Tue, 01/27/2009 - 12:06


I have the vlan access-map:

vlan access-map Servers_IN 10

match ip address Servers

action forward capture

The acl does include the ip addressing.

And I will add the vlan to my capture switchport.

Just wanted to verify if I could just add the vlan to the filter list or if I had to delete it entirely and then recreate the filter list with the 3 vlans I want to use. I'm thinking I can just add but wanted to double check.




This Discussion