10 permit – CANOGA PERKINS 9175 Command Reference User Manual

Page 597

Advertising
background image

CanogaOS Command Reference

33-6

[vlan vlan] [cos value] [protocol {arp | rarp | mpls | mpls-mcast}] [type {eth2 | snap | sap}]

[time-range time-range-name] [stats]

<1-2147483646>: the sequence number of the filter in MAC ACL. An auto-generated sequence number

will be assigned to the filter if this field is not presented.

src-mac: source MAC address

any: any host

mac mask: the MAC address and its wildcard bits

host mac: the host with a specified MAC address

dst-mac: destination MAC address

vlan vlan: vlan-id, <1-4094>

cos value: CoS,<0-7>

protocol: the protocol type which including ARP, RARP, MPLS, MPLS-MCAST

type: the L2 type including ETH2, SNAP, SAP

time-range: the time-range used by the MAC filter

stats: statistic function will be enabled if this field is presented

Command Mode

MAC ACL configuration

Usage

An auto-generated sequence number will be assigned to the filter if the sequence-num field is not

presented. The auto-generated sequence number is incremented by 10 on the maximum existing

sequence number in the MAC ACL. i.e. when the maximum existing sequence number is 100, the

sequence number of subsequent created MAC filter is 110.

Examples

This example shows how to create a filter in MAC ACL to deny the packets with source MAC address

001A.A02C.A1DF.

Switch(config-mac-acl)# 1 deny src-mac host 001A.A02C.A1DF

This example shows how to create a filter in MAC ACL to deny all the packets.

Switch(config-mac-acl)# 2 deny src-mac any

This example shows how to create a filter in MAC ACL to deny the packet whose source MAC address is

between the ranges specified.

Switch(config-mac-acl)# 3 deny src-mac 001A.A02C.A1DF 001A.A02C.0000

Related Commands

permit

33.10 permit

Use this command to create a MAC filter for allowing packets matching the filter rule to be delivered.

Command Syntax

[<1-2147483646>] permit src-mac {any| mac mask |host mac} [dst-mac {any |mac mask | host mac}]

[vlan vlan] [cos value] [protocol {arp | rarp | mpls | mpls-mcast}] [type {eth2 | snap | sap}]

Advertising