TSHOOT 300-135 Ticket #6

TSHOOT Ticket #6 on VLAN Filter

Hi ! everyone on today we are going to talk about vlan filter in troubleshooting which is shown with the help of topology given below.

Client 1 is not able to ping the server. Unable to ping DSW1 or the FTP Server(Use L2 Diagram).

Vlan Access map is applied on DSW1 blocking the ip address of client 10.2.1.3

Configuration on DSW1
vlan access-map test1 10
action drop
match ip address 10
vlan access-map test1 20
action drop
match ip address 20
vlan access-map test1 30
action forward
match ip address 30
vlan access-map test1 40
action forward
!
vlan filter test1 vlan-list 10
!
access-list 10 permit 10.2.1.3
access-list 20 permit 10.2.1.4
access-list 30 permit 10.2.1.0 0.0.0.255
!
interface VLAN10
ip address 10.2.1.1 255.255.255.0

Ans 1: DSW1
Ans 2: VLAN ACL/Port ACL
Ans 3: Under the global configuration mode enter no vlan filter test1 vlan-list 10 command