Allied Telesis AlliedWare Plus - Page 1872

C613-50100-01 REV C Command Reference for x930 Series 1872
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
ACCESS
-LIST (HARDWARE MAC NUMBERED)
Mode Global Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly
match a filter is permitted.
Usage This command creates an access-list for use with hardware classification, such as
when applying QoS. The 4000-4699 range MAC hardware access-list will match on
packets that have the specified source and destination MAC addresses. You may
apply the any parameter if the source or destination MAC host address is not
important.
NOTE: Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an access-list that will permit packets with a MAC address of
0000.00ab.1234 and any destination address enter the commands:
awplus# configure terminal
awplus(config)# access-list 4000 permit 0000.00ab.1234
0000.0000.0000 any
To create an access-list that will permit packets with an initial MAC address
component of 0000.00ab and any destination address, enter the commands:
awplus# configure terminal
awplus(config)# access-list 4001 permit 0000.00ab.1234
0000.0000.FFFF any
To create an access-list that will copy-to-mirror packets with an initial MAC address
component of 0000.00ab and any destination address for use with the mirror
interface command, enter the commands:
awplus# configure terminal
awplus(config)# access-list 4001 copy-to-mirror 0000.00ab.1234
0000.0000.FFFF any
<destination-mac-
mask>
The mask that will be applied to the destination MAC
addresses.
Enter this in the format <HHHH.HHHH.HHHH>
where each H is a hexadecimal number that represents
a 4 bit binary number. For a mask, each value will be
either 0 or F. Where Hex FF = Ignore, and Hex 00 =
Match.
any Any destination MAC address.
vlan <1-4094> Specifies that the ACL will match on the specified ID in
the packet’s VLAN tag.
inner-vlan <1-4094> This parameter is used within double-tagged VLANs. It
is the inner VLAN tag (VID); sometimes referred to as
the C-TAG (Customer VLAN TAG), where the vlan VID
tag is referred to as the S-TAG (Service VLAN TAG).
Parameter Description