115
Command Mode
Global Configuration Mode
Example
Create a Combined ACL whose ID is 320, and add Rule 12 for it. In the rule, the
source mac address is 11:22:33:44:55:66, the source MAC address mask is
11:11:11:11:11:00, the source IP address is 192.168.0.100 and the source IP
address mask is 255.255.255.0, and the packets match this rule will be
forwarded by the switch:
T1500-28PCT(config)# access-list create 320
T1500-28PCT(config)# access-list combined 320 rule 12 permit smac
11:22:33:44:55:66 smask 11:11:11:11:11:00 sip 192.168.0.100 sip-mask
255.255.255.0
rule
Description
The rule command is used to configure MAC ACL rule. To delete the
corresponding rule, please use no rule command.
Syntax
rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ]
[[ dmac destination-mac ] dmask destination-mac-mask ]
no rule rule-id
Parameter
rule-id —— The rule ID.
deny —— The operation to discard packets.
permit ——The operation to forward packets. It is the default value.
source-mac —— The source MAC address contained in the rule.
source-mac-mask —— The source MAC address mask. It is required if you
typed the source MAC address.
destination-mac —— The destination MAC address contained in the rule.
destination-mac-mask —— The destination MAC address mask. It is required if
you typed the destination MAC address.
Command Mode
Mac Access-list Configuration Mode