713
Command: Mac-ip-access-list extended <name>
no mac-ip-access-list extended <name>
Functions
:
Define a name-manner MAC-IP ACL or enter access-list configuration mode,
‘
no mac-ip-access-list extended
<name>
’ command deletes this ACL.
Parameters:<name> :
name of access-list excluding blank or quotation mark, and it must
start with letter, and the length cannot exceed 16 (remark: sensitivity on capital or small
letter.)
Command Mode:
Global mode
Default:
No named MAC-IP access-list
Usage Guide:After assigning this commands for the first time, only an empty name
access-list is created and no list item included.
Examples:
Create an MAC-IP ACL named mac. acl
Switch(Config)# mac-ip-access-list extended macip_acl
Switch(Config-MacIp-Ext-Nacl-macip_acl)#
18.2.2.19 permit | deny( ip extended)
Command: [no] {deny | permit} icmp {{<sIpAddr> <sMask>} | any-source |
{host-source
<sIpAddr>}} {{<dIpAddr>
<dMask>} | any-destination |
{host-destination <dIpAddr>}} [<icmp-type> [<icmp-code>]] [precedence <prec>]
[tos <tos>][time-range<time-range-name>]
[no] {deny | permit} igmp {{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} {{<dIpAddr>
<dMask>} | any-destination | {host-destination
<dIpAddr>}} [<igmp-type>] [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
[no] {deny | permit} tcp {{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} [s-port <sPort>] {{<dIpAddr> <dMask>} | any-destination |
{host-destination
<dIpAddr>}} [d-port <dPort>] [ack+fin+psh+rst+urg+syn]
[precedence <prec>] [tos <tos>][time-range<time-range-name>]
[no] {deny | permit} udp {{<sIpAddr> <sMask>} | any-source | {host-source
<sIpAddr>}} [s-port <sPort>] {{<dIpAddr> <dMask>} | any-destination |
{host-destination <dIpAddr>}} [d-port <dPort>] [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
[no] {deny | permit} {eigrp | gre | igrp | ipinip | ip | <int>} {{<sIpAddr>
<sMask>} | any-source | {host-source <sIpAddr>}} {{<dIpAddr> <dMask>} |
any-destination | {host-destination <dIpAddr>}} [precedence <prec>] [tos
<tos>][time-range<time-range-name>]
Functions:
Create a name expansion IP access rule to match specific IP protocol or all
IP protocol;
