204
MES1000, MES2000 Ethernet Switches
mask
—mask.
Packet analysis is performed only for the bytes
digits which have "1" specified as defined in the mask.
value
—the set value.
no offset-list
name
Removes a previously created list.
5.31.3
MAC ACL Configuration
The section provides values and description of main parameters which are used in MAC ACL
configuration commands.
In order to create a MAC ACL and enter its configuration mode, use the following command:
mac
access-list
extended
access-list
. For example, to create the
MESmac
ACL, the following commands
should be executed:
console#
console#
configure
console(config)#
mac access-list extended
MESmac
console(config-mac-al)#
Table 5.246
—
Main parameters of commands
Parameter
Value
Action
permit
Permit
Creates a permitting filtration rule in ACL.
deny
Deny
Creates a denying filtration rule in ACL.
source
Source address
Defines address of the packet source.
source_wildcard
A bit mask applied to MAC
address of the packet
source.
The mask defines the bits of the MAC address which should be
ignored. "1" should be written to all ignored bites. For
example, the mask can be used to define a MAC range for a
filtration rule. In order to add all MAC addresses beginning
from 00:00:02:AA.хх.хх to a filtration rule, the 0.0.0.0.FF.FF
mask should be specified. According to the mask the last 16
bits of MAC address will not be used in analysis.
destination
Destination address
Defines MAC address of the packet destination.
destination_wildcard
A bit mask applied to MAC
address of the packet
destination.
The mask defines the bits of the MAC address which should be
ignored. "1" should be written to all ignored bites. The mask is
used the same way as the
source_wildcard
mask.
vlan_id
Range of values: 0–4095.
VLAN subnetwork for packets filtering.
cos
Range of values: 0–7.
Class of service (CoS) for packets filtering.
cos_wildcard
A bit mask applied to the
class of service (CoS) of the
packets being filtered.
The mask defines the CoS bits which should be ignored. "1"
should be written to all ignored bites. For example, in order to
use CoS 6 and 7 in a filtration rule, the CoS field should have
value 6 or 7 and the mask field should have value 1 (the binary
form of 7 is 111, and 1 is 001; thus, the last bit will be ignored,
i. e. CoS may be 110 (6) or 111 (7)).
eth-type
Range of values: 0–0xFFFF.
Ethernet type in hex form for the packets being filtered.
disable-port
-
Disables the port which was used to send a packet fulfilling the
requirements of a
deny
command.
log-input
Message log
Enables message log registration when a packet is received
which corresponds to the record.
range_name
Name of the time-range
configuration profile
Defines configuration of time periods.
offset
_
list_name
Byte offset from the key
point.
Specifies that the user templates list should be used for
packets recognition. Every ACL may have its own templates list
defined.
index
Rule index
The index indicates position of the rule in a table. The lower
the index, the higher is the priority (1–2,147,483,647).
In order to select the whole range of parameters except
dscp
and
ip-precedence
, the
any
parameter is used.
