PLANET XGS3-24042 - Manual (Page 499)

51-8
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}{any-destination-mac|{host-destination-mac<h
ost_dmac>}|{<dmac><dmac-mask>}}[{untagged-eth
2 | tagged-eth2 | untagged-802-3 | tagged-802-3}
[ <offset1> <length1> <value1> [ <offset2> <length2>
<value2> [ <offset3> <length3> <value3> [ <offset4>
<length4> <value4> ]]]]]
no access-list <num>
extended access-list, if the
access-list already exists,
then a rule will add to the
current access-list; the “no
access-list
<num>“ command deletes a
numbered MAC extended
access-list.
(7) Configuring a extended MAC access-list based on nomenclature
a. Create a extensive MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name>
Creates an extended
name-based MAC access rule
for other IP protocols; the “no”
form command deletes this
name-based extended MAC
access rule.
b. Specify multiple “permit” or “deny” rule entries
Command Explanation
Extended name-based MAC access rule Mode
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>} |{<dmac> <dmac-mask>}} [cos
<cos-val> [<cos-bitmask>] [vlanId <vid-value>
[<vid-mask>][ethertype<protocol>[<protocol-mask>]
]]]
[no]{deny|permit} {any-source-mac
|{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}
{any-destination-mac|{host-destination-mac<host_d
mac>}|{<dmac><dmac-mask>}} [ethertype
<protocol> [<protocol-mask>]]
Creates an extended
name-based MAC access rule
matching MAC frame; the no
form command deletes this
name-based extended MAC
access rule.