Configure Tag Addition

Follow this procedure to add a VLAN tag to tagged or non-tagged packets.

1. Enter the Config mode.
   

   device(config)# 

2. Configure an ACL of type IPv4, IPv6, or MAC and any actions.
   

   device(config)# ip access-list acl5-ipv4
   device(config-ip-acl)# seq 10 permit ip any any count

   The specified ACL and configured actions will be bound to a listener policy.
3. Create the listener policy, including any action subcommands for the policy.
   

   Note

   A listener policy supports only one IPv4 ACL, IPv6 ACL, or MAC ACL. The VLAN id tag value ranges from 1 to 4095.
   

   device(config)# listener-policy lp-2 32
   device(config-listener-policy)# match ip access-list acl5-ipv4
   device(config-listener-policy)# vlan id
   device(config-listener-policy)# description "ipv4 tag add lp"

4. Configure an egress policy, and bind the listener policy, specifying any additional egress actions.
   

   Note

   An egress can be associated with only one listener policy.
   

   device(config)# egress e2
   device(config-egress)# set listener-policy lp-2 32
   device(config-egress)# description DirectTool
   device(config-egress)# precedence 1 interface ethernet 2/14

5. Configure an egress group and associate it with the egress policy.
   

   device(config)# egress-group eg_1 
   device(config-egress-group)# description e-group_1
   device(config-egress-group)# set egress e2

6. Configure the route map and set any other parameters, such as forwarding actions, match ip access list, and the egress-group.
   

   Note

   A route-map policy supports only one match-ACL per layer.
   

   device(config)# route-map R1 10
   device(config-route-map)# match ip access-list acl5-ipv4
   device(config-route-map)# set egress-group eg_1
   device(config-route-map)# forward-action permit

7. Configure an ingress group and associate a route map.
   

   Note

   An ingress group can be associated with only one route map.
   

   device(config)# ingress-group TAP_TRAFFIC
   device(config-ingress-group)# set route-map R1 10

8. Configure the interface port and channel for ingress traffic.
   

   Note

   In the following example, traffic is coming in on slot/port number 2/3.

   

   interface ethernet 2/3
   description From_TAP
   set ingress-group TAP_TRAFFIC
   no shutdown

9. Configure the interface port and channel for egress traffic.
   

   Note

   In the following example, traffic is leaving on slot/port number 2/14.

   

   interface ethernet 2/14
   speed 100000
   description To_Tool
   no shutdown