Layer 2 Access List Commands
permit (ES ACL)
To set conditions for an Ethernet services access list, use the permit command in Ethernet services access
list configuration mode. To remove a condition, use the no form of the command.
[ sequence-number ] permit {src-mac-address src-mac-mask| any| host| dest-mac-address dest-mac-mask}
[ethertype-number| capture| vlan min-vlan-ID [ max-vlan-ID ]] [cos cos-value] [dei] [inner-vlan min-vlan-ID
[ max-vlan-ID ]] [inner-cos cos-value] [inner-dei]
no sequence-number
Syntax Description
sequence-number
src-mac-address
src-mac-mac
any
host
dest-mac-address
dest-mac-mac
ethertype-number
capture
vlan
min-vlan-ID
max-vlan-ID
cos
cos-value
dei
(Optional) Number of the permit statement in the access list. This number
determines the order of the statements in the access list. The number can be
from 1 to 2147483646. (By default, the first statement is number 10, and the
subsequent statements are incremented by 10.) Use the resequence access-list
ethernet-service command to change the number of the first statement and
increment subsequent statements of a configured access list.
Source MAC address in format H.H.H.
Source MAC mask in format H.H.H.
Permits any source MAC address and mask.
Permits host with a specific host source MAC address and mask, in format
H.H.H.
Destination MAC address in format H.H.H.
Destination MAC mask in format H.H.H.
16-bit ethertype number in hexadecimal. Range is 0x1 to 0xffff.
(Optional) Captures packets using the traffic mirroring feature and copies this
to a capture file.
(Optional) Permits a specific VLAN or a range of VLANs.
ID for a specific VLAN or the beginning of a range of VLAN IDs.
(Optional) ID for the end of a range of VLAN IDs.
(Optional) Permits based on class of service value.
Class of service value. Range is from 0 to 7.
(Optional) Permits based on the setting of the discard eligibility indicator
(DEI).
Cisco ASR 9000 Series Aggregation Services Router VPN and Ethernet Services Command Reference, Release
permit (ES ACL)
6.1.x
657