Allied Telesis x510-28GPX, Справочник по командам

Страница: 1504 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1504
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED HARDWARE
ACL: MAC
ENTRY
)
Mode IPv4 Hardware ACL Configuration (accessed by running the command access-list
hardware (named hardware ACL) )
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage To use this command, first run the command access-list hardware (named
hardware ACL) and enter the desired access-list name. This changes the prompt to
awplus(config-ip-hw-acl)#.
Then use this command (and the other “named hardware ACL: entry” commands)
to add filter entries. You can add multiple filter entries to an ACL. You can insert a
new filter entry into the middle of an existing list by specifying the appropriate
sequence number. If you do not specify a sequence number, the switch puts the
entry at the end of the ACL and assigns it the next available multiple of 10 as its
sequence number.
Then use the access-group or the match access-group command to apply this ACL
to a port, VLAN or QoS class-map. Note that the ACL will only apply to incoming
data packets.
send-to-vlan-port
vlan <
vid > port
< port-number >
Send matching packets to the
specified port, tagged with the
specified VLAN. The specified port
must belong to the specified VLAN.
send-to-cpu
Send matching packets to the CPU.
mac
Match against MAC address
<source-mac>
The source MAC address to match against, followed by the mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any source MAC address.
<dest-mac>
The destination MAC address to match against, followed by the
mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any destination MAC address.
vlan < 1-4094 >
Match against the specified ID in the packet’s VLAN tag.
inner-vlan
< 1-4094 >
Match against the inner VLAN tag (VID). This parameter is used
within double-tagged VLANs. It is sometimes referred to as the
C-TAG (Customer VLAN TAG), and the vlan VID tag is referred to as
the S-TAG (Service VLAN TAG).
Parameter Description