Filter
Top Products
CLI (Command Line Interface)
223
NXA-ENET24 - Software Management Guide
ACL Information
MAC ACL Commands (Cont.)
Command Function
match access-list mac
This command changes the IEEE
802.1p priority of a Layer 2 frame
matching the defined ACL rule.
This feature is commonly referred
to as ACL packet marking.
Use the no form to remove the
ACL marker.
Syntax:
match access-list mac acl_name set priority priority
no match access-list mac acl_name
• acl_name – Name of the ACL. (Maximum length: 16 characters)
• priority – Class of Service value in the IEEE 802.1p priority tag. (Range:
0-7; 7 is the highest priority)
Default Setting: None
Command Mode: Interface Configuration (Ethernet)
Command Usage: You must configure an ACL mask before you can
change frame priorities based on an ACL rule.
Example:
Console(config)#interface ethernet 1/12
Console(config-if)#match access-list mac a set priority 0
Console(config-if)#
show marking Displays the current configuration for packet marking
ACL Information
Command Function
show access-list
This command shows all
ACLs and associated rules,
as well as all the user-
defined masks.
Command Mode: Privileged Exec
Command Usage: Once the ACL is bound to an interface (i.e., the ACL is
active), the order in which the rules are displayed is determined by the associ-
ated mask.
Example:
Console#show access-list
IP standard access-list david:
permit host 10.1.1.21
permit 168.92.0.0 255.255.15.0
IP extended access-list bob:
permit 10.7.1.1 0.0.0.255 any
permit 192.168.1.0 255.255.255.0 any destination-port 80 80
permit 192.168.1.0 255.255.255.0 any protocol tcp control-code 2 2
MAC access-list jerry:
permit any host 00-30-29-94-34-de ethertype 800 800
IP extended access-list A6:
deny tcp any any control-flag 2 2
permit any any
IP ingress mask ACL:
mask protocol any any control-flag 2
Console#
show access-group
This command shows the
port assignments of ACLs.
Command Mode: Privileged Executive
Example:
Console#show access-group
Interface ethernet 1/25
IP standard access-list david
MAC access-list jerry
Console#