18. Access Lists
388
permit (mac access-list extended)
Specifies the conditions by which the MAC filter permits access.
Syntax
To set or change information:
[
<sequence>
] permit {
<source mac>
<source mac mask>
| host
<source mac>
| any}
{
<destination mac>
<destination mac mask>
| host
<destination mac>
| any | bpdu | cdp |
lacp | lldp | oadp | pvst-plus-bpdu | slow-protocol } [
<ethernet type>
] [vlan
<vlan id>
]
[user-priority
<priority>
]
To delete information:
no
<sequence>
Input mode
(config-ext-macl)
Parameters
<sequence>
Specifies the sequence in which filter conditions are applied.
1.
Default value when this parameter is omitted:
10 is set as the initial value if there are no conditions in the access list.
If conditions have been set, the initial value is the maximum value for the application
sequence that has been set plus 10.
Note, however, that if the maximum value for the application sequence is greater than
4294967284, the value cannot be omitted.
2.
Range of values:
Specify 1 to 4294967294 in decimal.
{
<source mac>
<source mac mask>
| host
<source mac>
| any}
Specifies the source MAC address.
To specify all source MAC addresses, specify
any
.
1.
Default value when this parameter is omitted:
This parameter cannot be omitted.
2.
Range of values:
Specify
<source mac>
<source mac mask>
,
host
<source mac>
, or
any
.
Specify the source MAC address for
<source mac>
.
For
<source mac mask>
, specify a mask in MAC address format that specifies bits in the
MAC address whose permitted value is arbitrary.
If
host
<source mac>
is specified, the filter condition is an exact match of
<source
mac>
.
If
any
is specified, the source MAC address is not used as a filter condition.
MAC address (
nnnn
.
nnnn
.
nnnn
): 0000.0000.0000 to ffff.ffff.ffff (hexadecimal)
{
<destination mac>
<destination mac mask>
| host
<destination mac>
| any | bpdu | cdp | lacp |
lldp | oadp | pvst-plus-bpdu | slow-protocol }
Summary of Contents for AX3630S
Page 16: ......
Page 43: ...15 Chapter 3 Editing and Working with Configurations end quit exit save write show status top...
Page 59: ...4 Login Security and RADIUS or TACACS 31 tacacs server...
Page 63: ...4 Login Security and RADIUS or TACACS 35 aaa authentication login end by reject...
Page 77: ...4 Login Security and RADIUS or TACACS 49 ip access group ipv6 access list...
Page 92: ......
Page 95: ...5 Time Settings and NTP 67 Notes None Related commands set clock show clock show logging...
Page 100: ...5 Time Settings and NTP 72 ntp master ntp authenticate ntp trusted key ntp broadcast client...
Page 125: ...7 Device Management 97 Notes None Related commands None...
Page 164: ......
Page 178: ...10 Link Aggregation 150 channel group max active port...
Page 194: ...12 VLAN 166 Related commands mac based vlan static only...
Page 217: ...12 VLAN 189 Related commands None...
Page 224: ...12 VLAN 196 Related commands vlan mac...
Page 240: ...13 Spanning Tree Protocol 212 spanning tree single mode...
Page 276: ...13 Spanning Tree Protocol 248 Related commands None...
Page 285: ...13 Spanning Tree Protocol 257 Related commands None...
Page 287: ...13 Spanning Tree Protocol 259 spanning tree vlan mode...
Page 288: ......
Page 292: ...14 Ring Protocol 264 Related commands vlan...
Page 318: ......
Page 324: ...15 IGMP Snooping 296 Related commands ip igmp snooping...
Page 326: ......
Page 331: ...16 MLD Snooping 303 Related commands ipv6 mld snooping...
Page 340: ......
Page 389: ...18 Access Lists 361 remark...
Page 391: ...18 Access Lists 363 Related commands ipv6 access list...
Page 400: ...18 Access Lists 372 Related commands mac access list extended...
Page 420: ......
Page 436: ...19 QoS 408 Related commands ip qos flow list...
Page 442: ...19 QoS 414 Related commands ipv6 qos flow list...
Page 449: ...19 QoS 421 Related commands mac qos flow list...
Page 484: ......
Page 509: ...21 IEEE802 1X 481 dot1x multiple authentication...
Page 519: ...21 IEEE802 1X 491 dot1x system auth control dot1x port control...
Page 534: ...21 IEEE802 1X 506 dot1x system auth control dot1x vlan dynamic enable...
Page 547: ...21 IEEE802 1X 519 dot1x vlan enable...
Page 551: ...21 IEEE802 1X 523 Related commands dot1x system auth control dot1x vlan enable...
Page 555: ...21 IEEE802 1X 527 Related commands dot1x system auth control dot1x vlan enable...
Page 560: ......
Page 592: ......
Page 598: ...23 MAC based Authentication 570 mac authentication port...
Page 615: ...24 Authentication VLANs OP VAA 587 fense vlan...
Page 626: ......
Page 638: ...25 DHCP Snooping 610 ip dhcp snooping vlan...
Page 678: ...28 VRRP 650 track interface track ip route vrrp ip vrrp track...
Page 680: ...28 VRRP 652 ip address track interface track ip route vrrp ip vrrp track...
Page 682: ...28 VRRP 654 track ip route vrrp ip vrrp track...
Page 684: ...28 VRRP 656 track interface track ip route vrrp ip vrrp track...
Page 690: ...28 VRRP 662 track ip route vrrp ip vrrp track...
Page 692: ...28 VRRP 664 track interface track ip route vrrp ip vrrp track...
Page 717: ...689 Chapter 31 Storm Control storm control...
Page 739: ...33 CFM 711 ma vlan group...
Page 743: ...33 CFM 715 Related commands domain name ethernet cfm cc enable ma name ma vlan group...
Page 790: ......
Page 793: ...35 Log Data Output Functionality 765 ip domain name ip name server ip domain lookup...
Page 805: ...35 Log Data Output Functionality 777 Related commands logging host...
Page 806: ......
Page 819: ...36 sFlow Statistics 791 Notes None Related commands None...
Page 828: ......
Page 836: ......
Page 837: ...809 PART 14 Port Mirroring Chapter 39 Port Mirroring monitor session...