848
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
C613-50057-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
ACCESS
-
LIST
HARDWARE
MAC
FILTER
)
(access-list hardware MAC filter)
Overview
Use this ACL filter to add a MAC filter entry to the current hardware access-list. The
filter will match on any IP packet that has the specified source and destination MAC
addresses. The parameter
any
may be specified if an address does not matter. If a
sequence number is specified, the new filter is inserted at the specified location.
Otherwise, the new filter is added at the end of the access-list.
The
no
variant of this command removes a MAC filter entry from the current
hardware access-list. You can specify the MAC filter entry for removal by entering
either its sequence number (e.g.
no 10
), or by entering its MAC filter profile
without specifying its sequence number.
Note that the sequence number can be found by running the
show access-list (IPv4
Hardware ACLs)
command.
Syntax [mac]
[<
sequence-number
>]
{deny|permit|send-to-cpu|copy-to-cpu|copy-to-mirror} mac
{
<source-mac-address>
<source-mac-mask>
|any}
{
<destination-mac-address>
<destination-mac-mask>
|any}
no {deny|permit|send-to-cpu|copy-to-cpu|copy-to-mirror} mac
{
<source-mac-address>
<source-mac-mask>
|any}
{
<destination-mac-address>
<destination-mac-mask>
|any}
no <
sequence-number
>
Parameter
Description
<
sequence-number
>
<1-65535>
The sequence number for the filter entry of the
selected access control list.
deny
Specify packets to reject.
permit
Specify packets to accept.
send-to-cpu
Specify packets to send to the CPU.
copy-to-cpu
Specify packets to copy to the CPU.
copy-to-mirror
Specify packets to copy to the CPU.
mac
MAC address.
<source-mac-address>
The source MAC address of the packets.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that
represents a 4 bit binary number.
<source-mac-mask>
The mask that will be applied to the source MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that
represents a 4 bit binary number. For a mask, each
value will be either
0
or
F
.
Where Hex
FF
= Ignore, and Hex
00
= Match.
