Motorola WS5100 Series, Cli Reference Manual

Page: 347 / 492

Extended MAC ACL Instance 16-3
Parameters
Usage Guidelines
The deny command disallows traffic based on layer 2 (data-link layer) data. The MAC
access list denies traffic from a particular source MAC address or any MAC address. It can
also disallow traffic from a list of MAC addresses based on the source mask
The MAC access list can disallow traffic based on the VLAN and ethertype
Source Mask Define a source mask specifying the bits to match.
The source wildcard can be any one of the
following:
•
xx:xx:xx:xx:xx:xx/
xx:xx:xx:xx:xx:xx
–Source MAC address
and mask
• any – Any source host
• host
–
Exact source MAC address to match
Destination Mask Define a destination mask specifying the bits to
match. The destination wildcard can be any one of
the following:
•
xx:xx:xx:xx:xx:xx/
xx:xx:xx:xx:xx:xx
–Destination MAC
address and mask
• any – Any destination host
• host
–
Exact destination MAC address to
match
dot1p <0-7> Determine a 802.1p priority value to match
rule-precedence <1-5000> Define an access-list entry precedence
type( <1-
65535> |arp|ip|ipv6|vlan|wisp)
Set an ethertype value represented as an integer.
Use keywords for well-known ethertypes (IP, IPv6,
ARP etc.)
vlan <1-4095> Set a VLAN tag ID to match