Alcatel-Lucent 7950 SR, System Management Manual

Page: 132 / 462

Management Access Filter Commands
Page 132 7950 SR OS System Management Guide
filter match criterion.
This is a two-byte protocol id that is part of the IEEE 802.3 LLC SNAP Ethernet Frame that follows
the three-byte OUI field.
The snap-pid field, etype field, ssap and dsap fields are mutually exclusive and may not be part of the
same match criteria. Refer to the Router Configuration Guide for information about MAC Match
Criteria Exclusivity Rules fields that are exclusive based on the frame format.
Note: The snap-pid match criterion is independent of the OUI field within the SNAP header. Two
packets with different three-byte OUI fields but the same PID field will both match the same filter
entry based on a snap-pid match criteria.
The no form of the command removes the snap-pid value as the match criteria.
Default no snap-pid
Parameters pid-value — The two-byte snap-pid value to be used as a match criterion in hexadecimal.
Values 0x0000 — 0xFFFF
src-mac
Syntax src-mac ieee-address [ ieee-address-mask ]
no src-mac
Context config>system>security>mgmt-access-filter>mac-filter>entry>match
Description This command configures a source MAC address or range to be used as a MAC filter match criterion.
The no form of the command removes the source mac as the match criteria.
Default
no src-mac
Parameters
ieee-address — Enter the 48-bit IEEE mac address to be used as a match criterion.
Values
HH:HH:HH:HH:HH:HH or HH-HH-HH-HH-HH-HH where H is a hexadecimal
digit
ieee-address-mask — This 48-bit mask can be configured using:
To configure so that all packets with a source MAC OUI value of 00-03-FA are subject to a
match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000
Default
0xFFFFFFFFFFFF (exact match)
Values
0x00000000000000 — 0xFFFFFFFFFFFF
Format Style Format Syntax Example
Decimal DDDDDDDDDDDDDD 281474959933440
Hexadecimal
0xHHHHHHHHHHHH 0x0FFFFF000000
Binary
0bBBBBBBB...B 0b11110000...B