PLANET WGSW-50040 User Manual

Page 184

Advertising
background image

24-13

{host-source<source-host-ip>}}

{{<destination><destination-wildcard>}|any-destinati

on| {host-destination<destination-host-ip>}}

[precedence <precedence>] [tos

<tos>][time-range<time-range-name>]

specified number does not

exist, then an access-list will

be created using this number.

no access-list <num>

Deletes this numbered

extended

MAC-IP access

rule.

(9) Configuring a extended MAC-IP access-list based on nomenclature

a. Create a extensive MAC-IP access-list based on nomenclature

Command

Explanation

Global Mode

mac-ip-access-list extended <name>

no mac-ip-access-list extended <name>

Creates an extended

name-based MAC-IP access

rule; the “no” form command

deletes this name-based

extended

MAC-IP

access

rule.

b. Specify multiple “permit” or “deny” rule entries

Command

Explanation

Extended name-based MAC-IP access Mode

[no]{deny|permit}

{any-source-mac|{host-source-mac

<host_smac>}|{<smac><smac-mask>}}

{any-destination-mac|{host-destination-mac

<host_dmac>}|{<dmac><dmac-mask>}}icmp

{{<source><source-wildcard>}|any-source|

{host-source<source-host-ip>}}

{{<destination><destination-wildcard>}|any-destinati

on| {host-destination <destination-host-ip>}}

[<icmp-type> [<icmp-code>]] [precedence

<precedence>][tos<tos>][time-range<time-range-na

me>]

Creates an extended

name-based

MAC-ICMP

access rule; the “no” form

command deletes this

name-based extended

MAC-ICMP access rule.

[no]{deny|permit}{any-source-mac|{host-source-ma

c <host_smac>}|{<smac><smac-mask>}}

{any-destination-mac|{host-destination-mac

<host_dmac>}|{<dmac><dmac-mask>}}igmp

Creates an extended

name-based

MAC-IGMP

access rule; the “no” form

command deletes this

Advertising