C613-50100-01 REV C Command Reference for x930 Series 1871
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
ACCESS
-LIST (HARDWARE MAC NUMBERED)
access-list (hardware MAC numbered)
Overview This command creates an access-list for use with hardware classification, such as
QOS. The access-list will match on packets that have the specified source and
destination MAC addresses. The parameter any may be specified if an address
does not matter.
Optionally, the vlan and inner-vlan parameters can be matched for tagged
(802.1q) packets.
The no variant of this command removes the specified MAC hardware filter
access-list.
Syntax
access-list <4000-4699>
{copy-to-cpu|copy-to-mirror|deny|permit|send-to-cpu}
{<source-mac-address> <source-mac-mask>|any}
{<destination-mac-address> <destination-mac-mask>|any}
[vlan <1-4094> [inner-vlan <1-4094>]]
no access-list <4000-4699>
Parameter Description
<4000-4699> Hardware MAC access-list.
copy-to-cpu Specify packets to copy to the CPU.
copy-to-mirror Specify packets to copy to the mirror port.
deny Access-list rejects packets that match the source and
destination filtering.
permit Access-list permits packets that match the source and
destination filtering.
send-to-cpu Specify packets to send to the CPU.
<source-mac-address> The source MAC address of the packets.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number.
<source-mac-mask The mask that will be applied to the source MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number. For a mask, each value will be
either 0 or F. Where Hex FF = Ignore, and Hex 00 =
Match.
any Any source MAC address.
<destination-mac-
address>
The destination MAC address of the packets.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number.
To Next Page
Loading...
Need help?
General
