[Initial value]
none
[Input mode]
interface mode
[Description]
Applies an IPv6 access list to the LAN/SFP port.
If the received/transmitted frame matches the conditions in the access list, the action in the access list will be the action (permit,
deny) for the corresponding frame.
If this command is executed with the "no" syntax, the applied access list is deleted from the LAN/SFP port.
[Note]
The restrictions of the access list apply only to frames that are subject to being relayed. Frames that are transmitted
autonomously are excluded from these restrictions.
Only one access list for each direction can be registered for incoming frames (in) and for outgoing frames (out) on the same
interface.
Access lists can be applied only to LAN/SFP ports. (Logical interfaces are not supported.)
[Example]
Apply IPv6 access list #3002 to received frames of LAN port #1.
SWR2311P(config)#interface port1.1
SWR2311P(config-if)#access-group 3002 in
9.1.7 Generate MAC access list
[Syntax]
access-list
mac-acl-id
[
seq_num
]
action
src-info
dst-info
no
access-list
mac-acl-id
[
seq_num
] [
action
src-info
dst-info
]
[Parameter]
mac-acl-id
:
<2001-3000>
ID of MAC access list
seq_num
:
<1-65535>
Sequence number. Specifies the position of the entry within the applicable access list.
If the sequence number is omitted, the entry is added to the end of the list. At this time, the new entry
is automatically given a number that is 10 greater than the last existing entry. (If an entry is initially
added without a sequence number, its entry number will be 10.)
action
:
Specifies the action for the access condition
Setting value
Description
deny
"Deny" the condition
permit
"Permit" the condition
src-info
:
Specifies the transmission-source MAC address information that is the condition
Setting value
Description
HHHH.HHHH.HHHH
WWWW.WWWW.WWWW
Specifies the MAC address
(HHHH.HHHH.HHHH) with wildcard bits
(WWWW.WWWW.WWWW)
host HHHH.HHHH.HHHH
Specifies an individual MAC address
(HHHH.HHHH.HHHH)
any
Applies to all MAC addresses
dst-info
:
Specifies the destination MAC address information that is the condition
Command Reference | Traffic control |
221