D-Link DWS-3000 Series

248 © 2001- 2008 D-Link Corporation/D-Link Systems, Inc. All Rights Reserved.
CLI Command Reference
The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields,
respectively, of the VLAN tag. For packets containing a double VLAN tag, this is the first (or
outer) tag.
The assign-queue parameter allows specification of a particular hardware queue for handling
traffic that matches this rule. The allowed
<queue-id> value is 0-(n-1), where n is the number
of user configurable queues available for the hardware platform. The
assign-queue parameter
is valid only for a
permit rule.
The
assign-queue and redirect parameters are only valid for a permit rule.
NOTE: The special command form {deny | permit} any any is used to match all
Ethernet layer 2 packets, and is the equivalent of the IP access list “match
every” rule.
Format
{deny|permit} {<srcmac> | any} {<dstmac> | any} [<ethertypekey>
| <0x0600-0xFFFF>] [vlan {eq <0-4095>}] [cos <0-7>] [[log]
[assign-queue <queue-id>]]
Mode Mac-Access-List Config
mac access-group
This command attaches a specific MAC Access Control List (ACL) identified by <name> to an
interface in a given direction. The
<name> parameter must be the name of an existing MAC
ACL.
An optional sequence number may be specified to indicate the order of this mac access list
relative to other mac access lists already assigned to this interface and direction. A lower
number indicates higher precedence order. If a sequence number is already in use for this
interface and direction, the specified mac access list replaces the currently attached mac access
list using that sequence number. If the sequence number is not specified for this command, a
sequence number that is one greater than the highest sequence number currently in use for this
interface and direction is used.
This command specified in 'Interface Config' mode only affects a single interface, whereas the
'Global Config' mode setting is applied to all interfaces. The 'Interface Config' mode command
is only available on platforms that support independent per-port class of service queue
configuration.
Format
mac access-group <name> in [sequence <1-4294967295>]
Modes Global Config
Interface Config
no mac access-group
This command removes a MAC ACL identified by <name> from the interface in a given
direction.
Format
no mac access-list <name> in
Modes Global Config
Interface Config