Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 793

IP 4 H A C
V ARDWARE CCESS ONTROL
( ACL: MAC
NAMED HARDWARE
Mode IPv4 Hardware ACL Configuration (accessed by running the command
hardware (named hardware
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage To use this command, first run the command
hardware ACL)
awplus(config-ip-hw-acl)#.
Then use this command (and the other "named hardware ACL: entry" commands)
to add filter entries. You can add multiple filter entries to an ACL. You can insert a
new filter entry into the middle of an existing list by specifying the appropriate
sequence number. If you do not specify a sequence number, the switch puts the
entry at the end of the ACL and assigns it the next available multiple of 10 as its
sequence number.
Then use the
to a port or QoS class-map. Note that the ACL will only apply to incoming data
packets.
You can use ACLs to redirect packets, by sending them to the CPU. Use such ACLs
with caution. They could prevent control packets from reaching the correct
destination, such as EPSR healthcheck messages and VCStack messages.
Examples To add a filter entry to the access-list named "my-list" that will permit packets with
a source MAC address of 0000.00ab.1234 and any destination MAC address, use
the commands:
awplus#
awplus(config)#
awplus(config-ip-hw-acl)#
0000.0000.0000 any
To remove a filter entry that permit packets with a source MAC address of
0000.00ab.1234 and any destination MAC address, use the commands:
awplus#
awplus(config)#
awplus(config-ip-hw-acl)#
0000.0000.0000 any
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
)
ENTRY
Parameter Description
<dest-mac>
The destination MAC address to match against, followed by the
mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any destination MAC address.
vlan <1-4094>
Match against the specified ID in the packet's VLAN tag.
and enter the desired access-list name. This changes the prompt to
access-group
configure terminal
access-list hardware my-list
configure terminal
access-list hardware my-list
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
ACL))
access-list hardware (named
or the match access-group
permit mac 0000.00ab.1234
no permit mac 0000.00ab.1234
access-list
command to apply this ACL
793