Filter
Top Products
248 ACL Commands
Use this command in Mac-Access-List Configuration mode to create a new
rule for the current MAC access list. Each rule is appended to the list of
configured rules for the list.
The command is enhanced to accept the optional time-range parameter. The
time-range parameter allows imposing a time limitation on the MAC ACL
rule as defined by the parameter
time-range-name
. If a time range with the
specified name does not exist, and the MAC ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the ACL rule is applied
immediately. If a time range with the specified name exists, and the MAC
ACL containing this ACL rule is applied to an interface or bound to a VLAN,
then the ACL rule is applied when the time-range with a specified name
becomes active. The ACL rule is removed when the time-range with a
specified name becomes inactive.
Syntax
{deny | permit} {{any |
srcmac srcmacmask
} {any | bpdu |
dstmac
dstmacmask}} [
ethertypekey
|
0x0600-0xFFFF
] vlan {eq
0-4095
}] [cos
0-7
]
[[log] [time-range
time-range-name
] [assign-queue
queue-id
] [{mirror |
redirect}
interface-id
]
Parameter Description
Parameter Description
srcmac
Valid source MAC address in format xxxx.xxxx.xxxx.
srcmacmask
Valid MAC address bitmask for the source MAC address in
format xxxx.xxxx.xxxx.
any Packets sent to or received from any MAC address
dstmac
Valid destination MAC address in format xxxx.xxxx.xxxx.
destmacmask
Valid MAC address bitmask for the destination MAC address in
format xxxx.xxxx.xxxx.
bpdu Bridge protocol data unit
ethertypekey
Either a keyword or valid four-digit hexadecimal number.
(Range: Supported values are appletalk, arp, ibmsna, ipv4, ipv6,
ipx, mplsmcast, mplsucast, Netbios, novell, pppoe, rarp.)
2CSPC4.XModular-SWUM200.book Page 248 Thursday, March 10, 2011 11:18 AM