Cisco ASA Series Cli Configuration Manual page 577

Chapter 1 Adding an EtherType Access List
Configuration Examples for EtherType Access Lists
The following example shows how to configure EtherType access lists:
The following access list allows some EtherTypes through the ASA, but it denies IPX:
hostname(config)# access-list ETHER ethertype deny ipx
hostname(config)# access-list ETHER ethertype permit 0x1234
hostname(config)# access-list ETHER ethertype permit mpls-unicast
hostname(config)# access-group ETHER in interface inside
hostname(config)# access-group ETHER in interface outside
The following access list denies traffic with EtherType 0x1256, but it allows all others on both interfaces:
hostname(config)# access-list nonIP ethertype deny 1256
hostname(config)# access-list nonIP ethertype permit any
hostname(config)# access-group ETHER in interface inside
hostname(config)# access-group ETHER in interface outside
Feature History for EtherType Access Lists
Table 1-1
Table 1-1 Feature History for EtherType Access Lists
Feature Name
EtherType access lists
lists the release history for this feature.
Releases
7.0(1)
Configuration Examples for EtherType Access Lists
Feature Information
EtherType access lists control traffic based upon its
EtherType.
We introduced the feature and the following command:
access-list ethertype.
Cisco ASA Series CLI Configuration Guide
1-5