Deny (Mac) - HP BladeSystem bc2000 - Blade PC Reference Manual

deny (MAC)

The deny MAC-Access List Configuration mode command denies traffic if the conditions
defined in the deny statement match.
Syntax
deny destination
deny [disable-port] {any | {source source-wildcard}}{any | {destination destination-
wildcard}}[vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type]
Parameters
disable-port — Indicates that the port is disabled if the statement is deny.
n
source — Specifies the MAC address of the host from which the packet was sent.
n
source-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in bit
n
positions to be ignored.
destination — Specifies the MAC address of the host to which the packet is being sent.
n
destination-wildcard — (Optional for the first type) Specifies wildcard bits by placing 1s in
n
bit positions to be ignored.
vlan-id — Specifies the ID of the packet vlan.
n
cos — Specifies the packets's Class of Service (CoS).
n
cos-wildcard — Specifies wildcard bits to be applied to the CoS.
n
eth-type — Specifies the packet's Ethernet type.
n
Default Setting
This command has no default configuration.
Command Mode
MAC-Access List Configuration mode
Command Usage
MAC BPDU packets cannot be denied.
This command defines an Access Control Element (ACE). An ACE can only be removed by
deleting the ACL, using the no mac access-list Global Configuration mode command.
Alternatively, the Web-based interface can be used to delete ACEs from an ACL.
Use the following user guidelines:
Before an Access Control Element (ACE) is added to an ACL, all packets are permitted.
n
After an ACE is added, an implied deny-any-any condition exists at the end of the list and
those packets that do not match the conditions defined in the permit statement are denied.
If the VLAN ID is specified, the policy map cannot be connected to the VLAN interface.
n
HP PC Blade Switch CLI Reference Guide www.hp.com
ACL Commands
4-9