Dell Force10 MXL Blade Reference Manual page 125

Example Figure 6-8. mac access-list extended Command Example
FTOS(conf)#mac access-list extended TestMATExt
FTOS(conf-ext-macl)#remark 5 IPv4
FTOS(conf-ext-macl)#seq 10 permit any any
FTOS(conf-ext-macl)#remark 15 ARP
FTOS(conf-ext-macl)#seq 20 permit any any
FTOS(conf-ext-macl)#remark 25 IPv4
FTOS(conf-ext-macl)#seq 30 permit any any
FTOS(conf-ext-macl)#seq 40 permit any any count bytes
FTOS(conf-ext-macl)#exit
FTOS(conf)#do show mac accounting access-list snickers interface tengig0/47 in
Extended mac access-list snickers on TenGigabitEthernet 0/47
seq 10
bytes)
seq 20
bytes)
seq 30
Related
mac access-list standard
Commands
show mac accounting access-list
permit
Configure a filter to pass packets matching the criteria specified.
Syntax permit { any | host mac-address | mac-source-address mac-source-address-mask } { any | host
mac-address
[ count [ byte ]]
To remove this filter, you have two choices:
•
•
Parameters
any
host
mac-source-address
mac-source-address-mask
mac-destination-address
mac-destination-address-mask
permit any any
permit any any
permit any any ev2 eq 86dd
| mac-destination-address mac-destination-address-mask } [ ethertype operator ]
Use the no seq sequence-number command if you know the filter's sequence number.
Use the no permit { any | host mac-address | mac-source-address mac-source-address-mask }
{ any | mac-destination-address mac-destination-address-mask } command.
ev2 eq 800 count bytes
ev2 eq 806 count bytes
ev2 eq 86dd count bytes
ev2 eq 800 count bytes (559851886 packets 191402152148
ev2 eq 806 count bytes (74481486 packets 5031686754
count bytes (7751519 packets 797843521 bytes)
Configures a standard MAC access list.
MAC access list configurations and counters (if
Displays
configured).
Enter the keyword
Enter the keyword
forward packets with that host address.
Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
Enter the destination MAC address and mask in
nn:nn:nn:nn:nn:nn format.
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of
ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
any
to forward all packets.
host
followed by a MAC address to
Access Control Lists (ACL) | 125