Cisco Catalyst 2950 Command Reference Manual page 143

Chapter 2 Cisco IOS Commands
vines-ip
xns-idp
Defaults
This command has no defaults. However, the default action for a MAC-named ACL is to deny.
Command Modes
MAC access-list configuration
Command History Release
12.1(6)EA2
Usage Guidelines When an access control entry (ACE) is added to an ACL, an implied deny-any-any condition exists at
the end of the list. That is, if there are no matches, the packets are denied. However, before the first ACE
is added, the list permits all packets.
These options are not allowed:
•
•
•
For more information about configuring MAC extended ACLs, refer to the "Configuring Network
Note
Security with ACLs" chapter in the Catalyst 2950 Desktop Switch Software Configuration Guide for this
release.
Examples This example shows how to define the named MAC extended ACL to deny NETBIOS traffic from any
source to MAC address 00c0.00a0.03fa. Traffic matching this list is allowed.
Switch(config-ext-macl)# permit any host 00c0.00a0.03fa netbios
This example shows how to remove the permit condition from the named MAC extended ACL:
Switch(config-ext-macl)# no permit any host 00c0.00a0.03fa netbios
You can verify your settings by entering the show access-lists privileged EXEC command.
Related Commands Command
deny (MAC access-list
configuration)
mac access-list extended
show access-lists
78-11381-05
Select EtherType VINES IP.
Select EtherType Xerox Network Systems (XNS) protocol suite (from 0
to 65535), an arbitrary Ethertype in decimal, hexadecimal, or octal.
Modification
This command was first introduced.
Class of service (CoS)
Ethertype number of a packet with Ethernet II or Subnetwork Access Protocol (SNAP)
encapsulation
Link Service Access Point (LSAP) number of a packet with 802.2 encapsulation
Description
Prevents Layer 2 traffic from being forwarded if conditions are
matched.
Creates an ACL based on MAC addresses.
Displays ACLs configured on a switch.
Catalyst 2950 Desktop Switch Command Reference
permit (MAC access-list configuration)
2-119