255
DCS-3950 series Ethernet switch manual
access-list <num> {deny|permit}
{any-source-mac|
{host-source-mac<host_smac>}|{<sm
ac><smac-mask>}}{any-destination-m
ac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}
}[{untagged-eth2|tagged-eth2|untagge
d-802.3|tagged-802.3} [<offset1>
<length1> <value1> [<offset2>
<length2> <value2> [<offset3>
<length3> <value3> [<offset4>
<length4> <value4>]]]]]
no access-list <num>
Creates a numbered MAC extended
access-list, if the access-list already
exists, then a rule will add to the current
access-list; the ‘no access-list
<num>‘ command deletes a numbered
MAC extended access-list.
（7） Configuring a extended MAC access-list based on nomenclature
a. Create a extended MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name>
Creates an extended name-based MAC
access list; the ‘no’ form command
deletes this name-based extended MAC
access list
b. Specify multiple ‘permit’ or ‘deny’ rule entries
Command Explanation
Extended name-based MAC access rule
Mode
[no]{deny|permit}{any-source-mac|{ho
st-source-mac
<host_smac>}|{<smac><smac-mask>}
}
{any-destination-mac|{host-destinatio
n-mac <host_dmac>} |{<dmac>
<dmac-mask>}} [cos <cos-val>
[<cos-bitmask>]] [vlanId <vid-value>
[<vid-mask>]] [ethertype <protocol>
[<protocol-mask>]]
Creates an extended name-based MAC
access rule matching MAC frame; the
‘no’ form command deletes this
name-based extended MAC access rule
[no]{deny|permit}{any-source-mac|{ho
st-source-mac<host_smac>}|{<smac>
<smac-mask>}}{any-destination-mac|{
host-destination-mac<host_dmac>}|{<
dmac><dmac-mask>}} [untagged-eth2
[ethertype <protocol>
[protocol-mask]]]
Creates an extended name-based MAC
access rule matching untagged ethernet
2 frame; the ‘no’ form command deletes
this name-based extended MAC access
rule
To Next Page
Loading...
Need help?
General