PLANET XGS3-24040 - Manual (Page 445)

Chapter 46 ACL Configuration
46-7
(7) Configuring a extended MAC access-list based on nomenclature
a. Create a extensive MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name>
Creates an extended
name-based MAC access rule
for other IP protocols; the “no”
form command deletes this
name-based extended MAC
access rule.
b. Specify multiple “permit” or “deny” rule entries
Command Explanation
Extended name-based MAC access rule Mode
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>} |{<dmac> <dmac-mask>}} [cos
<cos-val> [<cos-bitmask>] [vlanId <vid-value>
[<vid-mask>][ethertype<protocol>[<protocol-mask>]
]]]
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac><dmac-mask>}}[ethertype<protocol>[<protocol
-mask>]]
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac><dmac-mask>}}[vlanId<vid-value>[<vid-mask>]
[ethertype<protocol>[<protocol-mask>]]]
Creates an extended
name-based MAC access rule
matching MAC frame; the
“no” form command deletes
this name-based extended
MAC access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac><dmac-mask>}}[untagged-eth2 [ethertype
<protocol> [protocol-mask]]]
Creates an extended
name-based MAC access rule
matching untagged ethernet 2
frame; the “no” form
command deletes this
name-based extended MAC
access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma Creates an MAC access rule