Allied Telesis IE340 Series - Page 1989

C613-50631-01 Rev A Command Reference for IE340 Series 1989
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED HARDWARE ACL ENTRY FOR MAC ADDRESSES)
Mode IPv4 Hardware ACL Configuration (accessed by running the command access-list
hardware (named hardware ACL))
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
send-to-vlan-port
vlan <vid> port
<port-number>
Send matching packets to the specified port, tagged with
the specified VLAN. The specified port must belong to the
specified VLAN.
send-to-cpu Send matching packets to the CPU.
Parameter Description
<sequence-number> The sequence number for the filter entry of the selected
access control list, in the range 1-65535. If you do not specify
a sequence number, the switch puts the entry at the end of
the ACL and assigns it the next available multiple of 4 as its
sequence number.
<action> The action that the switch will take on matching packets. See
the table above for valid values.
mac Match against MAC address
<source-mac> The source MAC address to match against, followed by the
mask.
Enter the address in the format <HHHH.HHHH.HHHH>,
where each H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where
each H is a hexadecimal number. For a mask, each value is
either 0 or F, where FF = Ignore, and 00 = Match.
any Match against any source MAC address.
<dest-mac> The destination MAC address to match against, followed by
the mask.
Enter the address in the format <HHHH.HHHH.HHHH>,
where each H is a hexadecimal number.
Enter the mask in the format <HHHH.HHHH.HHHH>, where
each H is a hexadecimal number. For a mask, each value is
either 0 or F, where FF = Ignore, and 00 = Match.
any Match against any destination MAC address.
vlan <1-4094> Match against the specified ID in the packet’s VLAN tag.
inner-vlan
<1-4094>
Match against the inner VLAN tag (VID). This parameter is
used within double-tagged VLANs. It is sometimes referred
to as the C-TAG (Customer VLAN TAG), and the vlan VID tag is
referred to as the S-TAG (Service VLAN TAG).
Values for the <action> parameter