EasyManuals Logo

Cisco IE 4000 Software Configuration Guide

Cisco IE 4000
1066 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #565 background imageLoading...
Page #565 background image
561
Configuring Network Security with ACLs
How to Configure Network Security with ACLs
Creating Named MAC Extended ACLs
Applying a MAC ACL to a Layer 2 Interface
Command Purpose
1. configure terminal Enters global configuration mode.
2. mac access-list extended name Defines an extended MAC access list using a name.
3. {deny | permit} {any | host source MAC
address | source MAC address mask} {any |
host destination MAC address | destination
MAC address mask} [type mask | lsap lsap
mask | aarp | amber | dec-spanning |
decnet-iv | diagnostic | dsm | etype-6000 |
etype-8042 | lat | lavc-sca | mop-console |
mop-dump | msdos | mumps | netbios |
vines-echo |vines-ip | xns-idp | 0-65535]
[cos cos]
In extended MAC access-list configuration mode, specifies to
permit or deny any source MAC address, a source MAC address
with a mask, or a specific host source MAC address and any
destination MAC address, destination MAC address with a mask,
or a specific destination MAC address.
(Optional) You can also enter these options:
type
mask—Specifies an arbitrary EtherType number of a
packet with Ethernet II or SNAP encapsulation in decimal,
hexadecimal, or octal with optional mask of don’t care bits
applied to the EtherType before testing for a match.
lsap lsap mask—Specifies an LSAP number of a packet with
IEEE 802.2 encapsulation in decimal, hexadecimal, or octal
with optional mask of don’t care bits.
aarp | amber | dec-spanning | decnet-iv | diagnostic | dsm
| etype-6000 | etype-8042 | lat | lavc-sca | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo
|vines-ip | xns-idp—Specifies a non-IP protocol.
cos cos—Specifies an IEEE 802.1Q cost of service number
from 0 to 7 used to set priority.
4. end Returns to privileged EXEC mode.
Command Purpose
1. configure terminal Enters global configuration mode.
2. interface interface-id Identifies a specific interface, and enters interface configuration
mode. The interface must be a physical Layer 2 interface (port
ACL).
3. mac access-group {name} {in} Controls access to the specified interface by using the MAC
access list.
Port ACLs are supported only in the inbound direction.
4. end Returns to privileged EXEC mode.

Table of Contents

Other manuals for Cisco IE 4000

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco IE 4000 and is the answer not in the manual?

Cisco IE 4000 Specifications

General IconGeneral
Product TypeSwitch
Form FactorDIN Rail Mountable
MAC Address Table Size8000
Jumbo Frame Support9216 bytes
Operating Temperature-40°C to 70°C
Mean Time Between Failures (MTBF)Over 500, 000 hours
Memory256 MB DRAM
MountingDIN Rail, Wall
CertificationsEN 50121-4
Ports8 x 10/100Base-TX Ethernet Ports

Related product manuals