Blade ICE G8124 Manuale Utente

176  

  Chapter 13: VMready

BMD00220, October 2010

A VLAN map (VMAP) is a type of Access Control List (ACL) that is applied to a VLAN or VM 
group rather than to a switch port as with regular ACLs (see 

). In 

a virtualized environment, VMAPs allow you to create traffic filtering and metering policies that 
are associated with a VM group VLAN, allowing filters to follow VMs as they migrate between 
hypervisors.

VLAN maps for VM groups are not supported simultaneously on the same ports as vNICs 

(see 

).

BLADEOS 6.5 supports up to 127 VMAPs when the switch is operating in the Balanced 
deployment mode (see 

). VMAP menus and commands are not 

available in the Routing deployment mode. 

Individual VMAP filters are configured in the same fashion as regular ACLs, except that VLANs 
cannot be specified as a filtering criteria (unnecessary, since VMAPs are assigned to a specific 
VLAN or associated with a VM group VLAN).

VMAPs are configured using the following ISCLI configuration command path:

RS G8124(config)# access-control vmap

action

Set filter action

egress-port

Set to filter for packets egressing this port

ethernet

Ethernet header options

ipv4

IP version 4 header options

meter

ACL metering configuration

packet-format

Set to filter specific packet format types

re-mark

ACL re-mark configuration

statistics

Enable access control list statistics

tcp-udp

TCP and UDP filtering options