Permit - Cisco Catalyst 3550 Command Reference Manual

Multilayer switch
Hide thumbs Also See for Catalyst 3550:
Table of Contents

Advertisement

Chapter 2
Cisco IOS Commands

permit

Use the permit MAC-access list configuration command to allow non-IP traffic to be forwarded if the
conditions are matched. Use the no form of this command to remove a permit condition from the
extended MAC access list.
Though visible in the command-line help strings, appletalk is not supported as a matching condition,
Note
nor is matching on any SNAP-encapsulated packet with a non-zero Organizational Unique Identifier
(OUI).
Syntax Description
any
host src-MAC-addr |
src-MAC-addr mask
host dst-MAC-addr |
dst-MAC-addr mask
type mask
aarp
amber
cos cos
dec-spanning
decnet-iv
diagnostic
dsm
etype-6000
etype-8042
78-11195-09
{permit | deny} {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr |
dst-MAC-addr mask} [type mask | cos cos | aarp | amber | dec-spanning | decnet-iv |
diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo | vines-ip | xns-idp]
no {permit | deny} {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr |
dst-MAC-addr mask} [type mask | cos cos | aarp | amber | dec-spanning | decnet-iv |
diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo |vines-ip | xns-idp]
Keyword to specify to deny any source or destination MAC address.
Define a host MAC address and optional subnet mask. If the source
address for a packet matches the defined address, non-IP traffic from that
address is denied.
Define a destination MAC address and optional subnet mask. If the
destination address for a packet matches the defined address, non-IP
traffic to that address is denied.
(Optional) Use the Ethertype number of a packet with Ethernet II or
SNAP encapsulation to identify the protocol of the packet.
(Optional) Select Ethertype AppleTalk Address Resolution Protocol that
maps a data-link address to a network address.
(Optional) Select EtherType DEC-Amber.
(Optional) Select an arbitrary class of service (CoS) number from 0 to 7
to set priority. Filtering on CoS can be performed only in hardware. A
warning message appears if the cos option is configured.
(Optional) Select EtherType Digital Equipment Corporation (DEC)
spanning tree.
(Optional) Select EtherType DECnet Phase IV protocol.
(Optional) Select EtherType DEC-Diagnostic.
(Optional) Select EtherType DEC-DSM.
(Optional) Select EtherType 0x6000.
(Optional) Select EtherType 0x8042.
type is from 0 to 65535, typically specified in hexadecimal.
mask is a mask of don't care bits applied to the Ethertype before
testing for a match.
Catalyst 3550 Multilayer Switch Command Reference
permit
2-193

Advertisement

Table of Contents
loading

Table of Contents