ZyXEL Communications MSC1000G Series, User Manual

Page: 673 / 1168

Chapter 19 acl Commands
Management Switch Card User’s Guide
673
The following example displays the MAC filtering status on all ports of the line card in slot 2.
19.12 acl macff Command
Use MAC forced forwarding to hide internal server information from subscribers. The MSC intercepts
a subscriber’s ARP (Address Resolution Protocol) requests and has the subscriber send traffic to a
pre-defined Access Router (AR) or Application Server (AS). The AR or AS routes or forwards
subscriber traffic so the subscribers do not know the MAC addresses of servers on the network.
Here is an example for subscribers connected to the line card in slot 1 and VLAN 100. The MSC
replies to ARP requests from subscribers 1~8 with the MAC address of a router at IP address
192.168.1.2. The subscribers use IP addresses 192.168.1.10~192.168.1.18.
19.13 acl ouifilter Commands
Use the following OUI (Organizationally Unique Identifier) filter commands to filter out packets from
devices with the specified OUI in the MAC address field.
The OUI field is the first three octets in a MAC address. An OUI uniquely identifies the manufacturer
of a network device and allows you to identify from which device brands the switch will accept
traffic or send traffic to. The OUI value is assigned by the IANA.
19.13.1 acl ouifilter disable Command
Syntax:
acl ouifilter disable < slot-port >
This command deactivates MAC OUI filtering on the port(s) of the specified line card.
ras> acl macfilter show 2
port mode enable mac address
----- ------ ------ -----------------
2- 1 accept -
2- 2 accept -
2- 3 accept -
2- 4 accept -
---------------------- Snip ---------------------
2-45 accept -
2-46 accept -
2-47 accept -
2-48 accept -
ras>
ras> acl macff set 1 100
ras> acl macff static set 1 1 100 192.168.1.2 192.168.1.10/28
ras>