PLANET XGS3-24040 - Manual (Page 446)

Chapter 46 ACL Configuration
46-8
c<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}
[untagged-802-3]
matching 802.3 frame; the
“no” form command deletes
this MAC access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac><dmac-mask>}}[tagged-eth2 [cos <cos-val>
[<cos-bitmask>]] [vlanId <vid-value> [<vid-mask>]]
[ethertype<protocol> [<protocol-mask>]]]
Creates an MAC access rule
matching tagged ethernet 2
frame; the “no” form
command deletes this MAC
access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c <host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac<host_d
mac>}|{<dmac><dmac-mask>}} [tagged-802-3 [cos
<cos-val> [<cos-bitmask>]] [vlanId <vid-value>
[<vid-mask>]]]
Creates an MAC access rule
matching tagged 802.3 frame;
the “no” form command
deletes this MAC access rule.
c. Exit ACL Configuration Mode
Command Explanation
Extended name-based MAC access configure Mode
exit
Quit the extended
name-based MAC access
configure mode.
(8) Configuring a numbered extended MAC-IP access-list
Command Explanation
Global mode
access-list<num>{deny|permit} {any-source-mac|
{host-source-mac <host_smac>} | {<smac>
<smac-mask>}} {any-destination-mac |
{host-destination-mac <host_dmac>} |
{<dmac><dmac-mask>}} icmp {{<source>
<source-wildcard>} |any-source| {host-source
<source-host-ip>}} {{<destination>
<destination-wildcard>} | any-destination |
{host-destination <destination-host-ip>}}
[<icmp-type> [<icmp-code>]] [precedence
<precedence>] [tos <tos>] [time-range
<time-range-name>]
Creates a numbered
mac-icmp extended mac-ip
access rule; if the numbered
extended access-list of
specified number does not
exist, then an access-list will
be created using this number.
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
Creates a numbered
mac-igmp extended mac-ip