PLANET XGS3-24040 User Manual
Page 744
Commands for Security Function Chapter 2 Commands for 802.1x
41-16
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [cos <cos-val> [ <cos-bitmask> ][vlanid <vid-value> [ <vid-mask> ][ethertype
<protocol> [ <protocol-mask> ]]]]
[no]{deny|permit}
{any-source-mac|{host-source-mac <host_smac> }|{ <smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [ethertype <protocol> [ <protocol-mask> ]]
[no]{deny|permit}
{any-source-mac|{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [vlanid <vid-value> [ <vid-mask> ][ethertype <protocol> [ <protocol-mask> ]]]
[no]{deny|permit}
{any-source-mac|{host-source-mac
<host_smac>
}|{ <smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [untagged-eth2 [ethertype <protocol> [protocol-mask]]]
[no]{deny|permit}{any-source-mac|{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [untagged-802-3]
[no]{deny|permit} {any-source-mac|{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [tagged-eth2 [cos <cos-val> [ <cos-bitmask> ]] [vlanId <vid-value>
[ <vid-mask> ]] [ethertype <protocol> [ <protocol-mask> ]]]
[no]{deny|permit}{any-source-mac|{host-source-mac
<host_smac>
}|{
<smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac>
<dmac-mask> }} [tagged-802-3 [cos <cos-val> [ <cos-bitmask> ]] [vlanId <vid-value>
[ <vid-mask> ]]]
Functions: Define an extended name MAC ACL rule, and ‘no’ command deletes this extended name IP
access rule.
Parameters: any-source-mac: any source of MAC address; any-destination-mac: any destination of
MAC address; host_smac, smac: source MAC address; smac-mask: mask (reverse mask) of source
MAC address ; host_dmac, dmas destination MAC address; dmac-mask mask (reverse mask) of
destination MAC address; untagged-eth2 format of untagged ethernet II packet; tagged-eth2 format of
tagged ethernet II packet; untagged-802-3 format of untagged ethernet 802.3 packet; tagged-802-3
format of tagged ethernet 802.3 packet; cos-val: cos value, 0-7; cos-bitmask: cos mask, 0-7reverse
mask and mask bit is consecutive; vid-value: VLAN No, 1-4094; vid-bitmask: VLAN mask, 0-4095,
reverse mask and mask bit is consecutive; protocol: specific Ethernet protocol No., 1536-65535;
protocol-bitmask: protocol mask, 0-65535, reverse mask and mask bit is consecutive.