32-39
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 32 Configuring PFC QoS
Configuring PFC QoS
Configuring MAC-Layer Named Access Lists (Optional)
In Release 12.1(1)E and later releases, you can configure named access lists that filter DECnet,
AppleTalk, VINES, or XNS traffic based on Layer 2 addresses.
To configure a MAC-Layer named access list, perform this task:
When configuring an entry in a MAC-Layer access list, note the following:
• You can enter MAC addresses as three 4-byte values in dotted hexadecimal format. For example,
0030.9629.9f84.
• You can enter MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bits
as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as
0.0.0).
• Entries without a protocol parameter match any protocol.
• Access lists entries are scanned in the order you enter them. The first matching entry is used. To
improve performance, place the most commonly used entries near the beginning of the access list.
• An implicit deny any any entry exists at the end of an access list unless you include an explicit
permit any any entry at the end of the list.
• All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
This list shows the ethertype values matched by the protocol keywords:
• 0x0600—xns-idp—Xerox XNS IDP
• 0x0BAD—vines-ip—Banyan VINES IP
• 0x0baf—vines-echo—Banyan VINES Echo
• 0x6000—etype-6000—DEC unassigned, experimental
• 0x6001—mop-dump—DEC Maintenance Operation Protocol (MOP) Dump/Load Assistance
• 0x6002—mop-console—DEC MOP Remote Console
• 0x6003—decnet-iv—DEC DECnet Phase IV Route
• 0x6004—lat—DEC Local Area Transport (LAT)
Command Purpose
Step 1
Router(config)# mac access-list extended
list_name
Configures a MAC-Layer named access list.
Router(config)# no mac access-list extended
list_name
Deletes a MAC-Layer named access list.
Step 2
Router(config-ext-macl)# {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any} [aarp
| amber | appletalk | diagnostic | decnet-iv |
dec-spanning | dsm | etype-6000 | etype-8042 |
lat | lavc-sca | mop-console | mop-dump | msdos |
mumps | netbios | vines-ip | vines-echo | xns]
Configures an access control entry (ACE) in a
MAC-Layer named access list.
Router(config-ext-macl)# no {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any} [aarp
| amber | appletalk | diagnostic | decnet-iv |
dec-spanning | dsm | etype-6000 | etype-8042 |
lat | lavc-sca | mop-console | mop-dump | msdos |
mumps | netbios | vines-ip | vines-echo | xns]
Deletes an ACE from a MAC-Layer named access list.
To Next Page
Loading...
Need help?
General
