Table of Contents
Advertisement
6.4.3
rule
Command Description
rule <1-127> deny/permit <source mac> <destination mac> cos
<0-7>/vlan <1-4094>/eth_type ETHTYPE
rule <1-127> deny/permit icmp/igmp/tcp/udp/ip <source ip>
<destination ip> ip_pri<0-7> / tos_pri<0-15>/ dscp_pri<0-63>
//This command is used to add an ACL ACE entry.
no rulel <1-127>
//This command is used to delete an ACL ACE entry.
Parameter
Parameter
<1-127>
source mac
destination mac
1-4094
ETHTYPE
source ip
destination ip
<0-7>
<0-15>
<0-63>
Default
None
Command Mode
Global configuration mode
Example
//This command is used to add a Mac - acl rules.
switch(config)#mac acl 1
switch(config-acl-mac)#rule 1 deny any any
6.4.4
ip/mac access-group
Command Description
ip access-group <100-999>
no ip access-group <100-999>
mac access-group <1-99>
no mac access-group <1-99>
//Using this command, you can bind the port to use the ACL rule.
Parameter
Parameters of the command mode
Rule number, range: 1-127
Source MAC address
Destination MAC address,
Vlan-id,range:1-4094
Ethernet type, range: 0x0000-0xFFFF;
0x0000 or do not fill in the representation
does not match the Ethernet type field,
Source IP address
Destination IP address,
Match the IP priority, range 0-7
Match the TOS, range 0-15
Match the DSCP, range 0-63
Hide quick links:
Advertisement
Table of Contents
