On both S5 and S6 vlan access-map Prob12 10 action drop match ip address Prob12 vlan access-map Prob12 20 action forward vlan filter Prob12 vlan-list 1-4094 ! ip access-list extended Prob12 permit tcp any any eq ident ! !