SNR S2940-8G-v2, Configuration Manual

Page: 285 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
(f) Creates a numbered MAC extended access-list
Command Explanation
Global Mode
access-list<num> { deny | permit } { any-
source-mac | { host-source-mac<host_smac> }
| { <smac><smac-mask> } } { any-destination-
mac | { host-destination-mac<host_dmac> } |
{ <dmac><dmac-mask> } } [ { untagged-eth2
| tagged-eth2 | untagged-802-3 | tagged-802-
3 } [ <offset1> <length1> <value1> [ <off-
set2> <length2> <value2> [ <offset3> <length3>
<value3> [ <offset4> <length4> <value4> ]]]]]
no access-list <num> Creates a numbered MAC extended
access-list, if the access-list already
exists, then a rule will add to the current
access-list; the 'no access-list <num>' com-
mand deletes a numbered MAC extended
access-list.
(g) Configuring a extended MAC access-list based on nomenclature
i. Create an extensive MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name> Creates an extended name-based MAC ac-
cess rule for other IP protocols; the no
form command deletes this name-based
extended MAC access rule.
ii. Specify multiple 'permit' or 'deny' rule entries
Command Explanation
Extended name-based MAC access rule Mode
[no] { deny | permit } { any-source-mac | { host-
source-mac <host_smac> } | { <smac><smac-mask>
}
} { any-destination-mac | { host-destination-mac
<host_dmac> } | { <dmac> <dmac-mask> } } [cos
<cos-val>
[<cos-bitmask>] [vlanId <vid-value> [<vid-
mask>][ethertype<protocol>[<protocol-mask>]]]]
[no] { deny | permit } { any-source-mac | { host-source-
mac<host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac<host_dmac> } | {
<dmac><dmac-mask> } } [ethertype <protocol> [<protocol-
mask>]]
[no] { deny | permit } { any-source-mac | { host-source-
mac<host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac<host_dmac> }
| { <dmac><dmac-mask> } } [vlanid <vid-value> [<vid-
mask>][ethertype <protocol> [<protocol-mask>]]]
Creates an extended name-
based MAC access rule match-
ing MAC frame; the no form
command deletes this name-
based extended MAC access
rule.
285