UANTA COMPUTER INC.
Layer 2,3,IPv6+QoS Switch
_____________________________________________________________________________
Layer 2,3,IPv6+QoS Network Switch User Manual Version 0.1
Page: 399/970
6.19.2.4 mac access-list
This command creates a new rule for the current MAC access list. Each rule is appended to the
list of configured rules for the list. Note that an implicit 'deny all' MAC rule always terminates the
access list. Note: The 'no' form of this command is not supported, as the rules within an ACL
cannot be deleted individually. Rather, the entire ACL must be deleted and re-specified.
A rule may either deny or permit traffic according to the specified classification fields. At a
minimum, the source and destination MAC value and mask pairs must be specified, each of
which may be substituted using the keyword any to indicate a match on any value in that field.
The bpdu keyword may be specified for the destination MAC value/mask pair indicating a
well-known BPDU MAC value of 01-80-c2-xx-xx-xx (hex), where 'xx' indicates a don't care. The
remaining command parameters are all optional. The Ethertype may be specified as either a
keyword or a four-digit hexadecimal value from 0x0600-0xFFFF. The currently supported
<ethertypekey> values are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast,
netbios, novell, pppoe, rarp. Each of these translates into its equivalent Ethertype value(s). The
assign-queue parameter allows specification of a particular hardware queue for handling traffic
that matches this rule. The allowed <queue-id> value is 0-(n-1), where n is the number of user
configurable queues available for the hardware platform. The redirect parameter allows the
traffic matching this rule to be forwarded to the specified <slot/port>. The assign-queue and
redirect parameters are only valid for a 'permit' rule.
Syntax
{deny | permit} {{<srcmac> <srcmask>} | any} {{<dstmac> <dstmask>} | any | bpdu}
[<ethertypekey>
|
<0x0600-0xFFFF>]
[vlan
{{eq
<0-4095>}}
[
cos
<0-7>]
[<secondary-vlan {{eq <0-4095>}} [secondary-cos <0-7>] [log] [assign-queue
<queue-id>] [{mirror | redirect} <slot/port>] [<rule-id>]
Default Setting
None
Command Mode
Mac Access-list Config
6.19.2.5 access-list
