Cisco Catalyst 3750-X Software Configuration Manual page 930

Configuring Standard QoS
This example shows how to create an ACL that permits IPv6 traffic from any source to any destination
that has the DSCP value set to 32:
Switch(config)# ipv6 access-list 100 permit ip any any dscp 32
This example shows how to create an ACL that permits IPv6 traffic from a source host at 10.1.1.1 to a
destination host at 10.1.1.2 with a precedence value of 5:
Switch(config)# ipv6 access-list ipv6_Name_ACL permit ip host 10::1 host 10.1.1.2
precedence 5
Creating a Layer 2 MAC ACL
Beginning in privileged EXEC mode, follow these steps to create a Layer 2 MAC ACL for non-IP traffic:
Command
Step 1 configure terminal
Step 2 mac access-list extended name
{permit | deny} {host src-MAC-addr mask |
Step 3
any | host dst-MAC-addr | dst-MAC-addr
mask} [type mask]
Step 4 end
show access-lists [access-list-number |
Step 5
access-list-name]
Step 6
copy running-config startup-config
To delete an access list, use the no mac access-list extended access-list-name global configuration
command.
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
39-50
Purpose
Enter global configuration mode.
Create a Layer 2 MAC ACL by specifying the name of the list.
After entering this command, the mode changes to extended MAC
ACL configuration.
Specify the type of traffic to permit or deny if the conditions are
matched, entering the command as many times as necessary.
For src-MAC-addr, enter the MAC address of the host from
•
which the packet is being sent. You specify this by using the
hexadecimal format (H.H.H), by using the any keyword as an
abbreviation for source 0.0.0, source-wildcard ffff.ffff.ffff, or by
using the host keyword for source 0.0.0.
For mask, enter the wildcard bits by placing ones in the bit
•
positions that you want to ignore.
For dst-MAC-addr, enter the MAC address of the host to which
•
the packet is being sent. You specify this by using the
hexadecimal format (H.H.H), by using the any keyword as an
abbreviation for source 0.0.0, source-wildcard ffff.ffff.ffff, or by
using the host keyword for source 0.0.0.
(Optional) For type mask, specify the Ethertype number of a
•
packet with Ethernet II or SNAP encapsulation to identify the
protocol of the packet. For type, the range is from 0 to 65535,
typically specified in hexadecimal. For mask, enter the don't
care bits applied to the Ethertype before testing for a match.
When creating an access list, remember that, by default, the
Note
end of the access list contains an implicit deny statement for
everything if it did not find a match before reaching the end.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 39 Configuring QoS
OL-21521-01