Cisco SPS208G User Manual page 105

ACL
MAC Based ACL
SPS208G/SPS224G4/SPS2024 Service Provider Switches User Guide
In addition to the fields above, the following fields appear in the IP Based ACL
Table:
•
Action — Indicates the ACL forwarding action. Possible field values are:
-
Permit
— Forwards packets which meet the ACL criteria.
-
Deny — Drops packets which meet the ACL criteria.
-
Shutdown
— Drops packet that meet the ACL criteria, and disables the
port to which the packet was addressed.
•
Source MAC Address — Matches the source MAC address to which
packets are addressed to the ACE.
-
Wild Card Mask
Wildcards are used to mask all or part of a source MAC Address. Wild
card masks specify which octets are used and which octets are ignored.
A wild card mask of ff:ff:ff:ff:ff:ff indicates that no octet is important. A
wildcard of 00:00:00:00:00:00 indicates that all the octets are important.
For example, if the source MAC address 09:00:07:A9:B2:EB and the
wildcard mask is 00:ff:00:ff:00:ff, the 1st, 3rd, and 5th octets of the MAC
address are checked, while the 2nd, 4th, and 6th octets are ignored.
-
Any — Any MAC address can be the source MAC address.
•
Destination MAC Address — Matches the destination MAC address to
which packets are addressed to the ACE.
-
Wild Card Mask
mask. Wildcards are used to mask all or part of a destination MAC
Address. Wild card masks specify which octets are used and which
octets are ignored. A wild card mask of ff:ff:ff:ff:ff:ff indicates that no
octet is important. A wildcard of 00:00:00:00:00:00 indicates that all the
octets are important. For example, if the destination IP address
09:00:07:A9:B2:EB and the wildcard mask is 00:ff:00:ff:00:ff, the 1st, 3rd,
and 5th octets of the MAC address are checked, while the 2nd, 4th, and
6th octets are ignored.
-
Any
— Any MAC address can be the destination MAC address.
•
VLAN ID — Matches the packet's VLAN ID to the ACE. The possible field
values are 1 to 4095.
•
Ethertype — Indicates the Ethertype packet by which the packets are
filtered.
— Indicates the source MAC Address wild card mask.
— Indicates the destination MAC Address wild card
6
105