Configuring A Mac Acl - Dell PowerConnect 8024 User Configuration Manual

Command
CTRL + Z
show ip access-lists
name
[ ]

Configuring a MAC ACL

Beginning in Privileged EXEC mode, use the following commands to create
an MAC ACL, configure rules for the ACL, and bind the ACL to an interface.
Command
configure
mac access-list extended
name
{deny | permit}
srcmac srcmacmask
{
dstmac
any} {
dstmacmask
| any |
ethertypekey
bpdu } [{
0x0600-0xFFFF
}] [vlan
0-4095 0-7
eq ] [cos
[secondary-vlan eq
4095
] [secondary-cos
0-7
] [log] [time-range
time-range-name
]
queue-id
[assign-queue
[{mirror |redirect}
interface
]
Purpose
Exit to Privileged EXEC mode.
Display all IPv4 access lists and all of the rules that are
defined for the IPv4 ACL. Use the optional
parameter to identify a specific IPv4 ACL to display.
Purpose
Enter global configuration mode.
Create a named MAC ACL. This command also enters
MAC Access List Configuration mode. If a MAC ACL
with this name already exists, this command enters the
mode to update the existing ACL.
Specify the rules (match conditions) for the MAC access
| list.
srcmac
• — Valid source MAC address in format
xxxx.xxxx.xxxx.
|
srcmacmask
•
MAC address in format xxxx.xxxx.xxxx.
]
0-
• any — Packets sent to or received from any MAC address
dstmac
• — Valid destination MAC address in format
xxxx.xxxx.xxxx.
destmacmask
•
]
destination MAC address in format xxxx.xxxx.xxxx.
• bpdu — Bridge protocol data unit
ethertypekey
•
hexadecimal number. (Range: Supported values are
appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast,
mplsucast, Netbios, novell, pppoe, rarp.)
0x0600-0xFFFF
•
(hexadecimal range 0x0600-0xFFFF)
— Valid MAC address bitmask for the source
— Valid MAC address bitmask for the
— Either a keyword or valid four-digit
— Specify custom EtherType value
Configuring Access Control Lists
name
535