Cisco 7604 Configuration Manual page 671

Chapter 41 Configuring PFC QoS
To disable VLAN-based QoS filtering in MAC ACLs, perform this task:
Command
Router(config)# no mac packet-classify use vlan
Configuring MAC ACLs
You can configure named ACLs that filter IPX, DECnet, AppleTalk, VINES, or XNS traffic based on
MAC addresses (IPX filtering with a MAC ACL is supported only with a PFC3).
In Release 12.2(17b)SXA and later releases in PFC3BXL or PFC3B mode, you can configure MAC
ACLs that do VLAN-based filtering or CoS-based filtering or both.
In Release 12.2(18)SXD and later releases, you can globally enable or disable VLAN-based QoS
filtering in MAC ACLs (disabled by default).
To configure a MAC ACL, perform this task:
Command
Step 1
Router(config)# mac access-list extended
list_name
Router(config)# no mac access-list extended
list_name
Step 2
Router(config-ext-macl)# {permit | deny}
{ src_mac_mask | any} { dest_mac_mask | any}
[{ protocol_keyword | { ethertype_number
ethertype_mask }} [vlan vlan_ID ] [cos cos_value ]]
Router(config-ext-macl)# no {permit | deny}
{ src_mac_mask | any} { dest_mac_mask | any}
[{ protocol_keyword | { ethertype_number
ethertype_mask }} [vlan vlan_ID ] [cos cos_value ]]
When configuring an entry in a MAC-Layer ACL, note the following information:
•
•
•
•
•
•
•
•
•
OL-4266-08
The PFC3 supports the ipx-arpa and ipx-non-arpa keywords.
The PFC2 does not support the ipx-arpa and ipx-non-arpa keywords.
The vlan and cos keywords are supported in PFC3BXL or PFC3B mode with
Release 12.2(17b)SXA and later releases.
The vlan and cos keywords are not supported in MAC ACLs used for VACL filtering.
With Release 12.2(18)SXD and later releases, the vlan keyword for VLAN-based QoS filtering in
MAC ACLs can be globally enabled or disabled and is disabled by default.
You can enter MAC addresses as three 2-byte values in dotted hexadecimal format. For example,
0030.9629.9f84.
You can enter MAC address masks as three 2-byte values in dotted hexadecimal format. Use 1 bits
as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as
0.0.0).
You can enter an EtherType and an EtherType mask as hexadecimal values.
Entries without a protocol parameter match any protocol.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Purpose
Disables VLAN-based QoS filtering in MAC ACLs.
Purpose
Configures a MAC ACL.
Deletes a MAC ACL.
Configures an access control entry (ACE) in a MAC ACL.
Deletes an ACE from a MAC ACL.
Configuring PFC QoS
41-69