Permit - Motorola RFS7000 Series Reference Manual

11-12 Overview

11.1.8 permit

MAC Extended ACL Config Commands
Use this command to specify packets to forward.
NOTE Use a decimal value representation of ethertypes to implement permit/deny/mark
designations for a packet. The command set an an Extended MAC ACL provides
the hexadecimal values for each listed ethertype. The switch supports all
ethertypes. Use the decimal equvilant of the ethertype listed in the CLI or for any
other type of ethertype.
A MAC access list (to allow an arp) is mandatory for both port and WLAN ACL's.
Syntax
{permit} {any|host source MAC address|source MAC\source MAC address mask}
{any|host destination MAC address | destination MAC\destination MAC address mask}
[vlan vlan-id] [dot1p dot1p-value] [type value|ip|ipv6|arp| vlan|wisp|0-65535]
[log] [rule-precedence access-list-entry precedence]
Parameters
Source MAC Address
Destination MAC Address
dot1p<0-7>
rule-precedence<1-5000>
type(<1-
65535>|arp|ip|ipv6|vlan|wisp)
vlan<1-4095>
Bit mask specifying the bits to match. The source wildcard can be any
one of the following.
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx
address and mask.
• – Any source host.
any
• Exact source MAC address to match.
host –
Bit mask specifying the bits to match. The destination wildcard can be
any one of the following:
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx
address and mask.
• – Any destination host.
any
• Exact destination MAC address to match.
host –
802.1p priority.
Access-list entry precedence.
EtherType.
VLAN ID.
–Source MAC
–Destination MAC