PLANET XGS3-24042 - Manual (Page 944)

47-10
[syn],(optional) only for TCP protocol, multi-choices of tag positions are available, and when TCP
data reports the configuration of corresponding position, then initialization of TCP data report is
enabled to form a match when in connection; precedence (optional) packets can be filtered by
priority which is a number from 0-7; tos (optional) packets can be filtered by service type which ia
number from 0-15; icmp-type (optional) ICMP packets can be filtered by packet type which is a
number from 0-255; icmp-code (optional) ICMP packets can be filtered by packet code which is a
number from 0-255; igmp-type (optional) ICMP packets can be filtered by IGMP packet name or
packet type which is a number from 0-255; <time-range-name>, name of time range
Command Mode:
Global mode
Default Configuration:
No access-list configured.
Usage Guide:
When the user assign specific <num> for the first time, ACL of the serial number is created, then the
lists are added into this ACL; the access list which marked 3200-3299 can configure not continual
reverse mask of IP address.
Examples:
Permit the passage of TCP packet with source MAC 00-12-34-45-XX-XX, any destination MAC
address, source IP address 100.1.1.0 0.255.255.255, and source port 100 and destination interface
40000.
Switch(config)#access-list 3199 permit 00-12-34-45-67-00 00-00-00-00-FF-FF
any-destination-mac tcp 100.1.1.0 0.255.255.255 s-port 100 any-destination d-port 40000
47.7 access-list(mac standard)
Command:
access-list <num> {deny|permit} {any-source-mac | {host-source-mac <host_smac> } |
{<smac> <smac-mask>} }
no access-list <num>
Functions:
Define a standard numeric MAC ACL rule, no command deletes a standard numeric MAC ACL
access-list rule.
Parameters:
<num> is the access-list No. which is a decimal’s No. from 700-799; deny if rules are matching,
deny access; permit if rules are matching, permit access; <host_smac>, <sumac> source MAC
address; <sumac-mask> mask (reverse mask) of source MAC address.