PLANET XGS3-24042 - Manual (Page 502)

51-11
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}udp
{{<source><source-wildcard>}|any-source|
{host-source<source-host-ip>}} [s-port {<port1> |
range <sPortMin> <sPortMax>}]
{{<destination><destination-wildcard>}|any-destinati
on| {host-destination<destination-host-ip>}} [d-port
{<port3> | range <dPortMin> <dPortMax>}]
[precedence <precedence>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered mac-udp
extended mac-ip access rule;
if the numbered extended
access-list of specified
number does not exist, then
an access-list will be created
using this number.
access-list<num>{deny|permit}{any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}} {any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}
{eigrp|gre|igrp|ip|ipinip|ospf|{<protocol-num>}}
{{<source><source-wildcard>}|any-source|
{host-source<source-host-ip>}}
{{<destination><destination-wildcard>}|any-destinati
on| {host-destination<destination-host-ip>}}
[precedence <precedence>] [tos
<tos>][time-range<time-range-name>]
Creates a numbered
extended mac-ip access rule
for other specific mac-ip
protocol or all mac-ip
protocols; if the numbered
extended access-list of
specified number does not
exist, then an access-list will
be created using this number.
no access-list <num>
Deletes this numbered
extended MAC-IP access
rule.
(9) Configuring a extended MAC-IP access-list based on nomenclature
a. Create a extensive MAC-IP access-list based on nomenclature
Command Explanation
Global Mode
mac-ip-access-list extended <name>
no mac-ip-access-list extended <name>
Creates an extended
name-based MAC-IP access
rule; the “no” form command
deletes this name-based
extended MAC-IP access
rule.
b. Specify multiple “permit” or “deny” rule entries