Dell PowerConnect M6348 Cli Reference Manual page 165

Command Mode
Global Configuration mode
User Guidelines
Users are permitted to add rules, but if a packet does not match any user-specified rules, the
packet is dropped by the implicit "deny all" rule.
Examples
The following examples create an ACL to discard any HTTP traffic from 192.168.77.171, but
allow all other traffic from 192.168.77.171:
console(config)#access-list alpha deny 192.168.77.171 0.0.0.0
0.0.0.0 255.255.255.255 eq http
console(config)#access-list alpha permit 192.168.77.171 0.0.0.0
deny | permit
Use the deny command in Mac-Access-List Configuration mode to deny traffic if the
conditions defined in the deny statement are matched. Use the permit command in Mac-
Access-List Configuration mode to allow traffic if the conditions defined in the permit
statement are matched.
Syntax
srcmac srcmacmask
{deny | permit} {
ethertypekey 0x0600-0xFFFF
[{ |
0-7
[secondary-cos ] [log] [ assign-queue
srcmac — Valid source MAC address in format xxxx.xxxx.xxxx.
•
srcmacmask — Valid MAC address bitmask for the source MAC address in format
•
xxxx.xxxx.xxxx.
• any — Packets sent to or received from any MAC address
dstmac — Valid destination MAC address in format xxxx.xxxx.xxxx.
•
destmacmask — Valid MAC address bitmask for the destination MAC address in format
•
xxxx.xxxx.xxxx.
• bpdu — Bridge protocol data unit
ethertypekey — Either a keyword or valid four-digit hexadecimal number. (Range: Supported
•
values are appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, Netbios, novell,
pppoe, rarp.)
0x0600-0xFFFF — Specify custom ethertype value (hexadecimal range 0x0600-0xFFFF)
•
• vlan eq — VLAN number. (Range 0-4095)
dstmac dstmacmask
| any} {
0-4095
}] [ vlan eq ] [cos
queue-id
] [{mirror |redirect}
| any | bpdu }
0-7
] [secondary-vlan eq
interface
0-4095
]
]
165