Table of Contents
Advertisement
•
0x0600-0xFFFF—Specify custom EtherType value (hexadecimal range
0x0600-0xFFFF).
•
vlan eq—VLAN identifier. (Range 0-4095). This matches the outer VLAN
of a single or double-tagged packet. It does not match untagged packets.
•
secondary-vlan eq—VLAN identifier. (Range 0-4095). This matches the
inner VLAN of a double-tagged packet. It does not match single or
untagged packets.
cos—Class of service. (Range 0-7)
•
log—Specifies that this rule is to be logged if the permit/deny rule has
•
been matched one or more times since the expiry of the last logging
interval. The logging interval is 5 minutes.
•
time-range-name—Use the time-range parameter to impose a time
limitation on the MAC ACL rule as defined by the parameter.
•
assign-queue—Specifies particular hardware queue for handling traffic
that matches the rule.
•
queue-id —0-6, where n is number of user configurable queues available
for that hardware platform. The queue ID is the internal queue number
(traffic class), not the CoS value. Use the show classofservice command
to display the assignment of CoS and DSCP values to internal queue
numbers.
•
mirror—Copies the traffic matching this rule to the specified interface.
•
redirect—Forwards traffic matching this rule to the specified Ethernet
interface.
•
interface-id—An Ethernet interface identifier, for example gi1/0/12.
•
rate-limit rate burst-size—Specifies the allowed rate of traffic per the
configured rate in Kbps and burst-size in kbytes. Rate limits only apply to
permit rules.
–
Rate— The committed rate in kilobits per second
–
Burst-size—The committed burst size in Kilobytes.
Default Configuration
An implicit deny all condition is added by the system after the last MAC or
IP/IPv6 access group if no route-map is configured on the interface.
Layer 2 Switching Commands
272
Advertisement
Table of Contents
