Blade ICE RACKSWITCH G8124-E - Manual (Page 176)

BLADEOS 6.5.2 Application Guide
176 Chapter 13: VMready BMD00220, October 2010
VLAN Maps
A VLAN map (VMAP) is a type of Access Control List (ACL) that is applied to a VLAN or VM
group rather than to a switch port as with regular ACLs (see
“Access Control Lists” on page 75 ). In
a virtualized environment, VMAPs allow you to create traffic filtering and metering policies that
are associated with a VM group VLAN, allowing filters to follow VMs as they migrate between
hypervisors.
Note – VLAN maps for VM groups are not supported simultaneously on the same ports as vNICs
(see “Virtual NICs” on page 153 ).
BLADEOS 6.5 supports up to 127 VMAPs when the switch is operating in the Balanced
deployment mode (see
“Deployment Profiles” on page 147 ). VMAP menus and commands are not
available in the Routing deployment mode.
Individual VMAP filters are configured in the same fashion as regular ACLs, except that VLANs
cannot be specified as a filtering criteria (unnecessary, since VMAPs are assigned to a specific
VLAN or associated with a VM group VLAN).
VMAPs are configured using the following ISCLI configuration command path:
RS G8124(config)# access-control vmap ?
action Set filter action
egress-port Set to filter for packets egressing this port
ethernet Ethernet header options
ipv4 IP version 4 header options
meter ACL metering configuration
packet-format Set to filter specific packet format types
re-mark ACL re-mark configuration
statistics Enable access control list statistics
tcp-udp TCP and UDP filtering options