Using The Cli - TP-Link T1600G-18TS Configuration Manual

Configuring ACL

2.2 Using the CLI

2.2.1 Configuring ACL
Follow the steps to create different types of ACL and configure the ACL rules.
You can define the rules based on source or destination IP addresses, source or
destination MAC addresses, protocol type and so on.
 Configuring the MAC ACL
Step 1 configure
Enter global configuration mode
Step 2 mac access-list access-list-num
Input an MAC ACL ID to enter MAC Access-list mode. If it is a new ID , the ACL will be created
and the switch will enter MAC Access-list mode.
access-list-num:
Step 3 rule rule-id {deny | permit} [ [smac source-mac ] smask source-mac-mask ] [ [dmac destination-
mac ] dmask destination-mac-mask ]
Add an MAC ACL rule.
rule-id
existing MAC ACL rule IDs
deny |
default, it is set to permit. The packets will be discarded if "deny" is selected and forwarded if
"permit" is selected.
source-mac
source-mac-mask
address is entered. The format is FF:FF:FF:FF:FF:FF.
destination-mac
destination-mac-mask
destination MAC address is entered. The format is FF:FF:FF:FF:FF:FF.
Step 4 show access-list [ access-list-num ]
(Optional) View the current ACL configuration.
access-list-num
Step 5 end
Return to privileged EXEC mode.
Step 6 copy running-config startup-config
Save the settings in the configuration file.
Enter an ACL ID between 0 and 499.
: Specify the rule ID, which ranges from 0 to 999. It should not be the same as any
permit: Specify the operation to be performed with the packets that match the rule. By
: Enter the source MAC address. The format is FF:FF:FF:FF:FF:FF.
: Enter the mask of the source MAC address. This is required if a source MAC
: Enter the destination MAC address. The format is FF:FF:FF:FF:FF:FF.
: Enter the mask of the destination MAC address. This is required if a
: The ID number of the ACL.
ACL Configurations
Configuration Guide 522