SNR S2940-8G-v2, Configuration Manual

Page: 286 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
[no] { deny | permit } { any-source-mac | { host-source-
mac<host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac<host_dmac> } | {
<dmac><dmac-mask> } } [untagged-eth2 [ethertype <pro-
tocol> [protocol-mask]]] Creates an extended name-
based MAC access rule match-
ing untagged ethernet 2 frame;
the no form command deletes
this name-based extended MAC
access rule.
[no] { deny | permit } { any-source-mac | { host-source-
mac<host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac <host_dmac> } | {
<dmac><dmac-mask> } } [untagged-802-3] Creates an name-based ex-
tended
MAC access rule
matching 802.3 frame; the no
form
command deletes this
name-based extended MAC
access rule.
[no] { deny | permit } { any-source-mac | { host-source-
mac<host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac<host_dmac> } |
{ <dmac><dmac-mask> } } [tagged-eth2 [cos <cos-val>
[<cos-bitmask>]] [vlanId <vid-value> [<vid-mask>]] [ether-
type<protocol> [<protocol-mask>]]] Creates an name-based ex-
tended MAC access rule match-
ing tagged ethernet 2 frame;
the no form command deletes
this name-based extended MAC
access rule.
[no] { deny | permit } { any-source-mac | { host-source-
mac <host_smac> } | { <smac><smac-mask> } } { any-
destination-mac | { host-destination-mac<host_dmac> } |
{ <dmac><dmac-mask> } } [tagged-802-3 [cos <cos-val>
[<cos-bitmask>]] [vlanId <vid-value> [<vid-mask>]]] Creates an name-based ex-
tended
MAC access rule
matching tagged 802.3 frame;
the no form command deletes
this name-based extended MAC
access rule.
iii. Exit ACL Configuration Mode
Command Explanation
Extended name-based MAC access configure Mode
exit Quit the extended name-based MAC ac-
cess configure mode.
(h) Configuring a numbered extended MAC-IP access-list
Command Explanation
Global Mode
access-list<num> { deny | permit } { any-source-mac | { host-
source-mac <host_smac> } | { <smac> <smac-mask> } } {
any-destination-mac | { host-destination-mac <host_dmac>
} | { <dmac><dmac-mask> } } icmp { { <source> <source-
wildcard> } | any-source | { host-source <source-host-
ip> } } { { <destination> <destination-wildcard> } | any-
destination | { host-destination <destination-host-ip> } }
[<icmp-type> [<icmp-code>]] [precedence <precedence>]
[tos <tos>] [time-range <time-range-name>] Creates a numbered mac-icmp
extended mac-ip access rule; if
the numbered extended access-
list of specified number does not
exist, then an access-list will be
created using this number.
286