Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) - Manual (Page 862)

IPv4 Hardware Access Control List (ACL) Commands
Software Reference for x310 Series Switches
34.16 AlliedWare Plus TM Operating System - Version 5.4.4C C613-50046-01 REV A
access-list (hardware MAC numbered)
This command creates an access-list for use with hardware classification, such as QOS. The
access-list will match on packets that have the specified source and destination MAC
addresses. The parameter any may be specified if an address does not matter.
The no variant of this command removes the specified MAC hardware filter access-list.
Syntax access-list <4000-4699>
{copy-to-cpu|copy-to-mirror|deny|permit|send-to-cpu}
{<source-mac-address> <source-mac-mask>|any}
{<destination-mac-address> <destination-mac-mask>|any}
no access-list <4000-4699>
Parameter Description
<4000-4699> Hardware MAC access-list.
copy-to-cpu Specify packets to copy to the CPU.
copy-to-mirror Specify packets to copy to the mirror port.
deny
Access-list rejects packets that match the source and
destination filtering.
permit
Access-list permits packets that match the source and
destination filtering.
send-to-cpu Specify packets to send to the CPU.
<source-mac-address>
The source MAC address of the packets. Enter this in
the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number.
<source-mac-mask
The mask that will be applied to the source MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number. For a mask, each value will be
either 0 or F. Where Hex FF = Ignore, and Hex 00 =
Match.
any Any source MAC address.
<destination-mac-
address>
The destination MAC address of the packets. Enter this
in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number.
<destination-mac-
mask>
The mask that will be applied to the destination MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number. For a mask, each value will be
either 0 or F. Where Hex FF = Ignore, and Hex 00 =
Match.
any Any destination MAC address.
vlan Specifies that the ACL will match on the ID in the
packet’s VLAN tag.
<1-4094> The VLAN VID.