CANOGA PERKINS CanogaOS Command Reference - Manual (Page 668)

CanogaOS Command Line Reference Revision 1.02
Proprietary & Confidential Canoga Pertkins Metro Ethernet Switches Page 668 of 855
33.10 permit
Use this command to create a MAC filter for allowing packets matching the filter rule to be delivered.
Command Syntax
[<1-2147483646>] permit src-mac {any| mac mask |host mac} [dst-mac {any |mac mask | host mac}]
[vlan vlan] [cos value] [protocol {arp | rarp | mpls | mpls-mcast}] [type {eth2 | snap | sap}]
[time-range time-range-name] [stats]
<1-2147483646>: the sequence number of the filter in MAC ACL. An auto-generated sequence
number will be assigned to the filter if this field is not presented.
src-mac: source MAC address
any: any host
mac mask: the mac address and its wildcard bits
host mac: the host with a specified MAC address
dst-mac: destination MAC address
vlan vlan: vlan-id, <1-4094>
cos value: CoS, <0-7>
protocol: the protocol type including ARP, RARP, MPLS, MPLS-MCAST
type: the L2 type including ETH2, SNAP, SAP
time-range: the time-range used by the MAC filter
stats: statistic function will be enabled if this field is presented
Command Mode
MAC ACL configuration
Usage
An auto-generated sequence number will be assigned to the filter if the sequence-num field is not
presented. The auto-generated sequence number is incremented by 10 on the maximum existing
sequence number in the MAC ACL. i.e. when the maximum existing sequence number is 100, the
sequence number of subsequent created MAC filter is 110
Examples
This example shows how to create a filter in MAC ACL to permit the packets with source MAC address
001A.A02C.A1DF.
Switch(config-mac-acl)# 1 permit src-mac host 001A.A02C.A1DF
This example shows how to create a filter in MAC ACL to permit all the packets.
Switch(config-mac-acl)# 2 permit src-mac any
This example shows how to create a filter in MAC ACL to permit the packets with source MAC address
between the ranges specified.
Switch(config-mac-acl)# 3 permit src-mac 001A.A02C.A1DF 001A.A02C.0000
Related Commands
deny