![background image](http://html1.mh-extra.com/html/foundry-networks/netiron-m2404c/netiron-m2404c_user-manual_2324273798.webp)
Foundry NetIron M2404C and M2404F Metro Access Switches
Configuring ACLs (Rev. 03)
Overview
© 2008 Foundry Networks, Inc
Page 29 of 50
type-code
16-bit hexadecimal value specifying the EtherType to be matched. See
Table 13
for EtherType known values.
wildcard
Mask to be applied to the EtherType value. Place ones in bit positions the
user wants to be ignored.
deny
Denies access if the conditions are matched.
permit
Permits access if the conditions are matched.
provider-vlan
<
vlan-id
>
(Optional). Specifies the provider VLAN identifier in the range <1-4093>.
The
provider-vlan
option is applied to the tls uplink interface in order to
match the external VLAN.
provider-vpt
<priority>
(Optional). Specifies the VLAN Priority Tag (VPT) in the provider VLAN
tag header in the range <0-7>. The
provider-vpt
option is applied to the
tls uplink interface in order to match the external VLAN priority tag.
vlan <vlan-id>
(Optional). Specifies a VLAN ID number, in the range <1-4093>.
<wildcard mask>
(Optional). Specifies the VLAN mask in hexadecimal format.
The provider and/or user VLAN identifiers can be defined for all TLS packets, which are received
on the uplink interface.
The user VLAN identifiers can be specified for all TLS packets, which are received on the user
interface.
Example
The following example defines an ACL with number 512, based on EtherType 0x8002. The mask
to be applied to the EtherType is 0x000F:
device-name
(config)#
access-list 512 deny ether-type 0x8002 0x000f
Table 13: EtherType Known Values
Value
Description
0x0000 - 0x05DC
IEEE 802.3 length
0x0800
IP (Internet Protocol)
Note:
Not supported in EtherType ACL.
0x0806
ARP (Address Resolution Protocol)
0x8035
DRARP (Dynamic RARP)
RARP (Reverse Address Resolution Protocol)
0x80F3
AARP (AppleTalk Address Resolution Protocol)
0x8100
EAPS (Ethernet Automatic Protection Switching)
Note: N
ot supported in EtherType ACL.
0x8137
IPX (Internet Packet Exchange)
0x86DD
IPv6 (Internet Protocol version 6)
0x880B
PPP (Point-to-Point Protocol)
0x880C
GSMP (General Switch Management Protocol)