Deny (mac) – Dell PowerEdge VRTX User Manual

Page 741

Advertising
background image

ACL Commands

741

FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC

2+3\new_system_mifs_ARC2_latest\ACL.fm

D E LL CO N F I D E N T IA L – P R E L I M I N A RY 4 / 3 / 14 - F O R PR O O F O N LY

log-input—Specifies sending an informational SYSLOG message about

the packet that matches the entry. Because forwarding/dropping is done in

hardware and logging is done in software, if a large number of packets

match an ACE containing a log-input keyword, the software might not be

able to match the hardware processing rate, and not all packets will be

logged.

Default Configuration

No MAC access list is defined.

Command Mode

MAC Access-list Configuration mode

Example

console(config)# mac access-list extended server1

console(config-mac-al)#

permit 00:00:00:00:00:01 00:00:00:00:00:ff

any

deny (MAC)

Use the deny command in MAC Access-list Configuration mode to set deny

conditions (ACEs) for a MAC ACL. Use the no form of the command to

remove the access control entry.

Syntax

deny

{any | source source-wildcard} {any | destination destination-

wildcard} [{eth-type 0}| aarp | amber | dec-spanning | decnet-iv |

diagnostic | dsm | etype-6000] [vlan vlan-id] [cos cos cos-wildcard] [

time-

range

time-range-name] [disable-port |log-input ]

no deny

{any | source source-wildcard} {any | destination destination-

wildcard} [{eth-type 0}| aarp | amber | dec-spanning | decnet-iv |

diagnostic | dsm | etype-6000] [vlan vlan-id] [cos cos cos-wildcard] [

time-

range

time-range-name] [disable-port |log-input ]

Parameters

source

—Source MAC address of the packet.

Advertising