Permit - Motorola RFS7000 Series Reference Manual

16-12 Overview

16.1.8 permit

MAC Extended ACL Config Commands
Use this command to specify packets to forward.
NOTE Use a decimal value representation of ethertypes to implement permit/deny/mark
designations for a packet. Extended MAC ACL's provide hexadecimal values for
each listed ethertype. The switch supports all ethertypes. Use the decimal
equvilant of the ethertype listed in the CLI or for any other type of ethertype.
A MAC access list (to allow an arp) is mandatory for both port and WLAN ACL's.
Syntax
{permit} {any|host source MAC address|source MAC\source MAC address mask}
{any|host destination MAC address | destination MAC\destination MAC address mask}
[vlan vlan-id] [dot1p dot1p-value] [type value|ip|ipv6|arp| vlan|wisp|0-65535]
[log] [rule-precedence access-list-entry precedence]
Parameters
Source MAC Address
Destination MAC Address
dot1p<0-7>
rule-precedence<1-5000>
type(<1-
65535>|arp|ip|ipv6|vlan|wisp)
vlan<1-4095>
Bit mask specifying the bits to match. The source wildcard can be any
one of the following.
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx
address and mask.
• – Any source host.
any
• Exact source MAC address to match.
host –
Bit mask specifying the bits to match. The destination wildcard can be
any one of the following:
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx
address and mask.
• – Any destination host.
any
• Exact destination MAC address to match.
host –
802.1p priority.
Access-list entry precedence.
EtherType.
VLAN ID.
–Source MAC
–Destination MAC