Access-List (Numbered Hardware Acl For Mac Addresses) - Allied Telesis CentreCOM FS980M/9 Command Reference Manual

IP 4 H A C
V ARDWARE CCESS ONTROL
- (
ACCESS LIST NUMBERED HARDWARE
access-list (numbered hardware ACL for
MAC addresses)
Overview This command creates an access-list for use with hardware classification. The
access-list will match on packets that have the specified source and destination
MAC addresses. You can use the value any instead of source or destination address
if an address does not matter.
Once you have configured the ACL, you can use the
access-group
The no variant of this command removes the specified MAC hardware filter
access-list.
access-list <4000-4699> <action> {<source-mac>|any}
Syntax
{<dest-mac>|any} [vlan <1-4094>]
no access-list <4000-4699>
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
ACL MAC )
FOR ADDRESSES
command to apply this ACL to a port or QoS class-map.
Parameter Description
<4000-4699>
Hardware MAC access-list.
<action>
The action that the switch will take on matching packets:
deny
permit
send-to-cpu
<source-mac>
The source MAC address to match against, followed by the mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any source MAC address.
<dest-mac>
The destination MAC address to match against, followed by the
mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any destination MAC address.
vlan <1-4094>
Match against the specified ID in the packet's VLAN tag.
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
access-group or the
Reject packets that match the source
and destination filtering specified with
this command.
Permit packets that match the source
and destination filtering specified with
this command.
Send matching packets to the CPU.
match
772