278
Functions:
Create a numeric standard IP access-list. If this access-list exists, then add a
rule list; the ―
no access-list
<num>
―operation of this command is to delete a numeric
standard IP access-list.
Parameters:
<num>
is the No. of access-list, 100-199;
<sIpAddr>
is the source IP
address, the format is dotted decimal notation;
<
sMask
>
is the reverse mask of source IP,
the format is dotted decimal notation.
Command Mode:
Global mode
Default:
No access-lists configured.
Usage Guide:
When the user assign specific
<num>
for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Examples:
Create a numeric standard IP access-list whose serial No. is 20, and permit
date packets with source address of 10.1.1.0/24 to pass, and deny other packets with
source address of 10.1.1.0/16.
Switch(config)#access-list 20 permit 10.1.1.0 0.0.0.255
Switch(config)#access-list 20 deny 10.1.1.0 0.0.255.255
27.5 access-list(mac extended)
Command: access-list
<num>
{deny | permit} {any-source-mac | {host-source-mac
<host_smac>
}
|
{
<smac>
<smac-mask>
}}
{any-destination-mac
|
{host-destination-mac
<host_dmac>
} | {
<dmac> <dmac-mask>
}}
[untagged-eth2 |
tagged-eth2 | untagged-802-3 | tagged-802-3]
no access-list
<num>
Functions:
Define a extended numeric MAC ACL rule,
―
no access-list
<num>
‖
command deletes an extended numeric MAC access-list rule.
Parameters:
<num>
is the access-
list No. which is a decimal‘s No. from 1100-1199;
deny
if rules are
matching, deny access;
permit
if rules are matching, permit access;
<any-source-mac>
any source address;
<any-destination-mac>
any destination address;
<host_smac>,
<smac>
source MAC address;
<smac-mask>
mask (reverse mask) of source MAC
address;
<host_dmac> , <dmac>
destination MAC address;
<dmac-mask>
mask
(reverse mask) of destination MAC address;
untagged-eth2
format of untagged ethernet
II packet;
tagged-eth2
format of tagged ethernet II packet;
untagged-802-3
format of
untagged ethernet 802.3 packet;
tagged-802-3
format of tagged ethernet 802.3 packet.
Command Mode:
Global mode
Default Configuration:
No access-list configured
Summary of Contents for S6124
Page 311: ...311 Machine...
Page 314: ...314...
