775
Functions:Define an extended name MAC ACL rule, and ‘no’ formof this command
deletes this extended name IP access rule.
Parameters: any-source-mac:
any source of MAC address;
any-destination-mac
: any
destination of MAC address;
host_smac , smac
: source MAC address;
smac-mask
:
mask (reverse mask) of source MAC address ;
host_dmac , dmas
destination MAC
address;
dmac-mask
mask (reverse mask) of destination MAC address;
untagged-eth2
format of untagged ethernet II packet;
tagged-eth2
format of tagged ethernet II packet;
untagged-802-3
format of untagged ethernet 802.3 packet;
tagged-802-3
format of
tagged ethernet 802.3 packet;
cos-val:
cos value, 0-7;
cos-bitmask:
cos mask,
0-7reverse mask and mask bit is consecutive;
vid-value:
vlanNo, 1-4094;
vid-bitmask :
vlan mask, 0-4095, reverse mask and mask bit is consecutive;
protocol:
specific Ethernet protocol No., 1536-65535;
protocol-bitmask:
protocol mask, 0-65535,
reverse mask and mask bit is consecutive.
Notice:
mask bit is consecutive means the effective bit must be consecutively effective
from the first bit on the left, no ineffective bit can be added through. For example: the
reverse mask format of one byte is: 00001111b; mask format is 11110000; and this is not
permitted: 00010011.
Command Mode:
Name extended MAC access-list configuration mode
Default configuration
: No access-list configured
19.2.2.22 permit | deny(mac-ip extended)
Command:[no]{deny|permit}{any-source-mac|{host-source-mac<host_smac>}|{<s
mac><smac-mask>}}{any-destination-mac|{host-destination-mac<host_
dmac>}|{<dmac><dmac-mask>}}icmp{{<source><source-wildcard>}|any
|{host<source-host-ip>}}{{<destination><destination-wildcard>}|any-des
tination|{host-destination<destination-host-ip>}}[<icmp-type>[<icmp-co
de>]][precedence<precedence>][tos<tos>][time-range<time-range-name
>]
[no]{deny|permit}{any-source-mac|{host-source-mac<host_smac>}|{<s
mac><smac-mask>}}{any-destination-mac|{host-destination-mac<host_
dmac>}|{<dmac><dmac-mask>}}igmp{{<source><source-wildcard>}|any
|{host<source-host-ip>}}{{<destination><destination-wildcard>}|any-des
tination|{host-destination
<destination-host-ip>}}[<igmp-type>][precedence<precedence>][tos<to
s>][time-range<time-range-name>][no]{deny|permit}{any-source-mac|{h
ost-source-mac<host_smac>}|{<smac><smac-mask>}}{any-destination-
mac|{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}tcp{{<
source><source-wildcard>}|any|{host<source-host-ip>}}[s-port<port1>]{
