Permit (Mac) - Dell PowerConnect 5424 Command Line Interface Manual

User Guidelines
• Use the ip access-list Global Configuration mode command to enable the IP-Access List
Configuration mode.
• Before an Access Control Element (ACE) is added to an ACL, all packets are permitted. After an ACE
is added, an implied deny-any-any condition exists at the end of the list and those packets that do not
match the defined conditions are denied.
Example
The following example shows how to define a permit statement for an IP ACL.
Console(config)# ip access-list ip-acl1
Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any

permit (MAC)

The permit MAC-Access List Configuration mode command defines permit conditions of an MAC
ACL.
Syntax
• permit {any | {host source source-wildcard} any | {destination destination-wildcard}} [vlan vlan-id]
[cos cos cos-wildcard] [ethtype eth-type] [inner-vlan vlan-id]
• source — Specifies the source MAC address of the packet.
source-wildcard — Specifies wildcard bits to be applied to the source MAC address by placing 1s in
•
bit positions to be ignored.
• any — Specify a MAC address and mask. For example, to set 00:00:00:00:10:XX use the Mac
address 00:00:00:00:10:00 and mask 00:00:00:00:00:FF.
• destination — Specifies the MAC address of the host to which the packet is being sent.
• destination-wildcard — Specifies wildcard bits to be applied to the destination MAC address by
placing 1s in bit positions to be ignored.
• vlan-id — Specifies the ID of the packet vlan. (Range: 1 - 4094)
• cos — Specifies the Class of Service (CoS) for the packet. (Range: 0 - 7)
• cos-wildcard — Specifies wildcard bits to be applied to the CoS.
• eth-type — Specifies the Ethernet type of the packet in hexadecimal format. (Range: 0 - 05dd-ffff)
• inner-vlan vlad-id — Specifies the inner vlan id of a double tagged packet.
80 ACL Commands