Allied Telesis AT-x510-28GPX, Command Reference Manual

Page: 1397 / 2601

C613-50102-01 REV C Command Reference for x510 Series 1397
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
ACCESS
-
LIST
(
HARDWARE
MAC
NUMBERED
)
Mode Global Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly
match a filter is permitted.
Usage This command creates an access-list for use with hardware classification, such as
when applying QoS. The 4000-4699 range MAC hardware access-list will match on
packets that have the specified source and destination MAC addresses. You may
apply the
any parameter if the source or destination MAC host address is not
important.
NOTE
: Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an access-list that will permit packets with a MAC address of
0000.00ab.1234
and any destination address enter the commands:
awplus# configure terminal
awplus(config)# access-list 4000 permit 0000.00ab.1234
0000.0000.0000 any
To create an access-list that will permit packets with an initial MAC address
component of
0000.00ab
and any destination address, enter the commands:
awplus# configure terminal
awplus(config)# access-list 4001 permit 0000.00ab.1234
0000.0000.FFFF any
To create an access-list that will copy-to-mirror packets with an initial MAC address
component of
0000.00ab
and any destination address for use with the mirror
interface command, enter the commands:
awplus# configure terminal
awplus(config)# access-list 4001 copy-to-mirror 0000.00ab.1234
0000.0000.FFFF any
<destination-mac-
mask>
The mask that will be applied to the destination MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number. For a mask, each value will be
either
0
or
F
. Where Hex
FF
= Ignore, and Hex
00
=
Match.
any
Any destination MAC address.
vlan < 1-4094 >
Specifies that the ACL will match on the specified ID in
the packet’s VLAN tag.
inner-vlan < 1-4094 >
This parameter is used within double-tagged VLANs. It
is the inner VLAN tag (VID); sometimes referred to as
the C-TAG (Customer VLAN TAG), where the vlan VID
tag is referred to as the S-TAG (Service VLAN TAG).
Parameter Description