Deny (Mac Access-List Configuration) - Cisco Catalyst 3650 series Command Reference Manual

deny (MAC access-list configuration)

To prevent non-IP traffic from being forwarded if the conditions are matched, use the deny MAC access-list
configuration command on the switch stack or on a standalone switch. To remove a deny condition from the
named MAC access list, use the no form of this command.
deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
no deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
Syntax Description
any
host src-MAC-addr | src-MAC-addr mask
host dst-MAC-addr | dst-MAC-addr mask
type mask
aarp
amber
appletalk
dec-spanning
decnet-iv
diagnostic
Denies any source or destination MAC address.
Defines a host MAC address and optional subnet mask. If the
source address for a packet matches the defined address,
non-IP traffic from that address is denied.
Defines a destination MAC address and optional subnet mask.
If the destination address for a packet matches the defined
address, non-IP traffic to that address is denied.
(Optional) Specifies the EtherType number of a packet with
Ethernet II or SNAP encapsulation to identify the protocol
of the packet.
The type is 0 to 65535, specified in hexadecimal.
The mask is a mask of don't care bits applied to the EtherType
before testing for a match.
(Optional) Specifies EtherType AppleTalk Address
Resolution Protocol that maps a data-link address to a network
address.
(Optional) Specifies EtherType DEC-Amber.
(Optional) Specifies EtherType AppleTalk/EtherTalk.
(Optional) Specifies EtherType Digital Equipment
Corporation (DEC) spanning tree.
(Optional) Specifies EtherType DECnet Phase IV protocol.
(Optional) Specifies EtherType DEC-Diagnostic.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
deny (MAC access-list configuration)
739