Cisco 7609 Configuration Manual page 437

Chapter 32 Configuring PFC QoS
Configuring MAC-Layer Named Access Lists (Optional)
In Release 12.1(1)E and later releases, you can configure named access lists that filter DECnet,
AppleTalk, VINES, or XNS traffic based on Layer 2 addresses.
To configure a MAC-Layer named access list, perform this task:
Command
Step 1
Router(config)# mac access-list extended
list_name
Router(config)# no mac access-list extended
list_name
Step 2
Router(config-ext-macl)# {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any} [aarp
| amber | appletalk | diagnostic | decnet-iv |
dec-spanning | dsm | etype-6000 | etype-8042 |
lat | lavc-sca | mop-console | mop-dump | msdos |
mumps | netbios | vines-ip | vines-echo | xns]
Router(config-ext-macl)# no {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any} [aarp
| amber | appletalk | diagnostic | decnet-iv |
dec-spanning | dsm | etype-6000 | etype-8042 |
lat | lavc-sca | mop-console | mop-dump | msdos |
mumps | netbios | vines-ip | vines-echo | xns]
When configuring an entry in a MAC-Layer access list, note the following:
•
•
•
•
•
•
This list shows the ethertype values matched by the protocol keywords:
•
•
•
•
•
•
•
•
78-14064-04
You can enter MAC addresses as three 4-byte values in dotted hexadecimal format. For example,
0030.9629.9f84.
You can enter MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bits
as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as
0.0.0).
Entries without a protocol parameter match any protocol.
Access lists entries are scanned in the order you enter them. The first matching entry is used. To
improve performance, place the most commonly used entries near the beginning of the access list.
An implicit deny any any entry exists at the end of an access list unless you include an explicit
permit any any entry at the end of the list.
All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
0x0600—xns-idp—Xerox XNS IDP
0x0BAD—vines-ip—Banyan VINES IP
0x0baf—vines-echo—Banyan VINES Echo
0x6000—etype-6000—DEC unassigned, experimental
0x6001—mop-dump—DEC Maintenance Operation Protocol (MOP) Dump/Load Assistance
0x6002—mop-console—DEC MOP Remote Console
0x6003—decnet-iv—DEC DECnet Phase IV Route
0x6004—lat—DEC Local Area Transport (LAT)
Purpose
Configures a MAC-Layer named access list.
Deletes a MAC-Layer named access list.
Configures an access control entry (ACE) in a
MAC-Layer named access list.
Deletes an ACE from a MAC-Layer named access list.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
Configuring PFC QoS
32-39