Permit (Mac) - HP BladeSystem bc2000 - Blade PC Reference Manual

ACL Commands

permit (MAC)

The permit MAC-Access List Configuration mode command defines permit conditions of an
MAC ACL.
Syntax
permit {any | {host source source-wildcard} any | {destination destination-wildcard}} [vlan
vlan-id] [cos cos cos-wildcard] [ethtype eth-type]
Parameters
source — Specifies the source MAC address of the packet.
n
source-wildcard — Specifies wildcard bits to be applied to the source MAC address. Use 1s
n
in bit positions to be ignored.
destination — Specifies the MAC address of the host to which the packet is being sent.
n
destination-wildcard — Specifies wildcard bits to be applied to the destination MAC
n
address. Use 1s in bit positions to be ignored.
vlan-id — Specifies the ID of the packet VLAN. (Range: 0-4095)
n
cos — Specifies the Class of Service (CoS) for the packet. (Range: 0-7)
n
cos-wildcard — Specifies wildcard bits to be applied to the CoS.
n
eth-type — Specifies the Ethernet type of the packet.(Range: 0-65535)
n
Default Setting
No MAC ACL is defined.
Command Mode
MAC-Access List Configuration mode
Command Usage
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an
ACE is added, an implied deny-any-any condition exists at the end of the list and those packets
that do not match the conditions defined in the permit statement are denied.
If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface.
Example
The following commands create a MAC ACL with permit rules.
Console(config)# mac access-list macl-acl1
Console(config-mac-al)# permit 6:6:6:6:6:6 0:0:0:0:0:0 any vlan 6
4-8 www.hp.com HP PC Blade Switch CLI Reference Guide