D-Link DXS-3600-16S Manual page 33

Example
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#mac access-list extended 6001
DXS-3600-32S(config-mac-nacl)#25 deny host 0013.0049.8272 any aarp
DXS-3600-32S(config-mac-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 ext_ipv6
10 permit ip any any
Extended MAC access list 6001 ext-mac-6001
25 deny host 00-13-00-49-82-72 any aarp
DXS-3600-32S#
3-9 expert access-list
This command is used to create or modify an extended expert ACL. This command will enter into the extended expert
access-list configuration mode. Use the no command to remove an extended expert access-list.
expert access-list extended {[id | name]}
no expert access-list extended {id | name}
Parameters
id
name
Default
Command Mode
Command Default Level
Usage Guideline
Example
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#expert access-list extended exp_acl
DXS-3600-32S(config-exp-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 ext_ipv6
10 permit ip any any
Extended MAC access list 6001 ext-mac-6001
25 deny host 00-13-00-49-82-72 any aarp
Extended EXPERT access list 9999 exp_acl
DXS-3600-32S#
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
This example shows how to use the extended MAC ACL. The purpose is to deny a
host, with the MAC address of 0013.0049.8272, to send Ethernet frames of the type
'apply'.
Specifies the ID number of extended expert ACL. This number must be between
8000 and 9999.
Specifies the name of the extended expert ACL to be configured. The name can be
up to 32 characters long.
None.
Global Configuration Mode.
Level: 12
The name must be unique among all (including MAC, IP, IPv6 or Expert) access-lists
and the first character of name must be a letter.
When creating an ACL through the assignment of a name, an ID will be assigned
automatically. The ID assign rule states to start from the maximum ID of 9999 and
decrease 1 for every new ACL created.
When creating an ACL through the assignment of an ID, a name will be assigned
automatically. The name assign rule is 'ext-expert' + "-" + ID. If this name conflicts
with the name of an existing ACL, then it will be renamed based on the following rule:
'ext-expert' + "-" + ID +"alt"
This example shows how to create an extended expert ACL.
25