Alcatel OS-LS-6224 User Manual page 338

4
Command Line Interface
placing 1s in bit positions to be ignored.
• destination — Specifies the MAC address of the host to which the packet is
being sent.
• destination-wildcard — (Optional for the first type) Specifies wildcard bits by
placing 1s in bit positions to be ignored.
• vlan-id — Specifies the ID of the packet vlan. (Range: 0-4095).
• cos — Specifies the packet's Class of Service (CoS) (Range: 0-7).
• cos-wildcard — Specifies wildcard bits to be applied to the CoS.
• eth-type — Specifies the packet's Ethernet type (Range: 0-0xFFFF).
• inner-vlan vlan id — The inner VLAN ID of a double tagged packet.
Default Setting
This command has no default configuration.
Command Mode
MAC-Access List Configuration mode
Command Usage
MAC BPDU packets cannot be denied.
This command defines an Access Control Element (ACE). An ACE can only
be removed by deleting the ACL, using the no mac access-list Global
Configuration mode command. Alternatively, the Web-based interface can be
used to delete ACEs from an ACL.
The inner-vlan field can be assigned only on:
• Fast Ethernet customer interfaces (the port mode is customer).
• Service provider interfaces when ALL the traffic is double tagged.
Use the following user guidelines:
• Before an Access Control Element (ACE) is added to an ACL, all packets
are permitted. After an ACE is added, an implied deny-any-any condition
exists at the end of the list and those packets that do not match the
conditions defined in the permit statement are denied.
• If the VLAN ID is specified, the policy map cannot be connected to the
VLAN interface.
Example
The following example shows how to create a MAC ACL with deny rules on a
device.
Console(config)# mac access-list macl1
Console (config-mac-acl)# deny 6:6:6:6:6:6:0:0:0:0:0:0 deny
Related Commands
mac access-list
permit (MAC)
314