Digitus DN-80233, User Manual

Page: 210 / 379

209
mplsucast 0x8847
netbios 0x8191
novell 0x8137, 0x8138
pppoe 0x8863, 0x8864
rarp
0x8035
The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields,
respectively, of the VLAN tag. For packets containing a double VLAN tag, this is the first (or outer)
tag. In contrast, the secondary-vlan and secondary-cos parameters refer to equivalent fields
contained in the inner tag of a double VLAN-tagged packet (These fields are not present in a
packet with a single tag.).
The assign-queue parameter allows specification of a particular hardware queue for handling traffic
that matches this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user
configurable queues available for the hardware platform. The redirect parameter allows the traffic
matching this rule to be forwarded to the specified <unit/slot/port>. The assign-queue and redirect
parameters are only valid for a 'permit' rule.
Format {deny|permit} {{<srcmac> <srcmacmask} | any} {{<dstmac> <dstmac-mask>} | any | bpdu}
[<ethertypekey> | <0x0600-0xFFFF>] [vlan{{eq <0-4095>} | {range <0-4095> <0-4095>}}] [cos
<0-7>] [sec-ondary-vlan {{eq <0-4095>} | {range <0-4095> <0-4095>}}] [sec-ondary-cos <0-7>]
[assign-queue <queue-id>] [redirect <unit/slot/port>]
Note:
The special command form {deny|permit} any any is used to match all
Ethernet layer 2 packets, and is the equivalent of the IP access list "match
every" rule.
Mode Mac-Access-List Config
9.1.4 mac access-group
This command attaches a specific MAC Access Control List (ACL) identified by <name> to an
interface in a given direction. The <name> parameter must be the name of an exsiting MAC
ACL.
An optional sequence number may be specified to indicate the order of this mac access list relative
to other mac access lists already assigned to this interface and direction. A lower number
indicates higher precedence order. If a sequence number is already in use for this interface and
direction, the specified mac access list replaces the currently attached mac access list using that
sequence number. If the sequence number is not specified for this command, a sequence number
that is one greater than the highest sequence number currently in use for this interface and
direction is used.
This command specified in 'Interface Config' mode only affects a single interface, whereas the
'Global Config' mode setting is applied to all interfaces. The 'Interface Config' mode command is
only available on platforms that support independent per-port class of service queue configuration.
Format mac access-group <name> [in|out] [sequence <1-4294967295>]
Modes
Global ConfigInterface Config