Ericsson ECN330, User Manual

Page: 715 / 1226

Command Line Interface
709
1553-KDU 137 365 Uen D 2006-06-16
Example
Related Commands
permit
,
deny
(section 7.8.11 on page 709)
mac access-group
(section 7.8.16 on page 717)
show mac access-list
(section 7.8.12 on page 711)
7.8.11 permit, deny (MAC ACL)
This command adds a rule to a MAC ACL. The rule filters packets matching a
specified MAC source or destination address (that is, physical layer address), or
Ethernet protocol type. Use the
no
form to remove a rule.
Syntax
[no] {permit | deny}
{any | host < source > | < source > < address-bitmask >}
{any | host <
destination
> | <
destination
> <
address-
bitmask >}
[vid <
vid
> <
vid-bitmask
>] [ethertype <
protocol
>
[ protocol-bitmask ]]
Note: The default is for Ethernet II packets.
[no] {permit | deny} tagged-eth2
{any | host <
source
> | <
source
> <
address-bitmask
>}
{any | host < destination > | < destination > < address-
bitmask
>}
[vid < vid > < vid-bitmask >] [ethertype < protocol >
[
protocol-bitmask
]]
[no] {permit | deny} untagged-eth2
{any | host <
source
> | <
source
> <
address-bitmask
>}
{any | host < destination > | < destination > < address-
bitmask
>}
[ethertype < protocol > [ protocol-bitmask ]]
Console(config)#access-list mac jerry
Console(config-mac-acl)#