Centrecom FS980M/9 Command Reference Manual page 791

IP 4 H A C
V ARDWARE CCESS ONTROL
( ACL: MAC
NAMED HARDWARE
(named hardware ACL: MAC entry)
Overview Use this command to add a MAC address filter entry to the current hardware
access-list. The access-list will match on packets that have the specified source and
destination MAC addresses. You can use the value any instead of source or
destination MAC address if an address does not matter.
If you specify a sequence number, the switch inserts the new filter at the specified
location. Otherwise, the switch adds the new filter to the end of the access-list.
The no variant of this command removes a filter entry from the current hardware
access-list. You can specify the filter entry for removal by entering either its
sequence number (e.g. no 100), or by entering its filter profile without specifying
its sequence number (e.g. no permit mac aaaa.bbbb.cccc 0000.0000.0000 any).
You can find the sequence number by running the
ACLs)
Hardware ACLs will permit access unless explicitly denied by an ACL action.
[<sequence-number>] <action> mac {<source-mac>|any}
Syntax
{<dest-mac>|any} [vlan <1-4094>]
no <sequence-number>
no <action> mac {<source-mac>|any} {<dest-mac>|any} [vlan
<1-4094>]
613-50137-01 Rev A
L (ACL) C
IST OMMANDS
)
ENTRY
command.
Parameter Description
<4000-4699>
Hardware MAC access-list.
<action>
The action that the switch will take on matching packets:
deny
permit
send-to-cpu
mac
Match against MAC address
<source-mac>
The source MAC address to match against, followed by the mask.
Enter the address in the format <HHHH.HHHH.HHHH>, where each
H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where each H
is a hexadecimal number. For a mask, each value is either 0 or F,
where FF = Ignore, and 00 = Match.
any
Match against any source MAC address.
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.6-2.x
show access-list (IPv4 Hardware
Reject packets that match the source
and destination filtering specified with
this command.
Permit packets that match the source
and destination filtering specified with
this command.
Send matching packets to the CPU.
791