269
DCS-3950 series Ethernet switch manual
no access-list <num>
Functions: Define a standard numeric MAC ACL rule, ‘no access-list <num>’ command
deletes a standard numeric MAC ACL access-list rule
Parameters: <num> is the access-list No. which is a decimal’s No. from 700-799; deny if
rules are matching, deny access; permit if rules are matching, permit access;
<host_smac>, <sumac> source MAC address; <sumac-mask> mask (reverse mask) of
source MAC address
Command mode: Global Mode
Default:No access-list configured
Usage Guide: When user assign specific <num> for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Example: Configure the switch to allow packets from 00-00-xx-xx-00-01 to be forwarded,
and deny any packets coming from 00-00-00-xx-00-ab.
Switch(Config)# access-list 700 permit 00-00-00-00-00-01 00-00-FF-FF-00-00
Switch(Config)# access-list 700 deny 00-00-00-00-00-ab 00-00-00-FF-00-00
15.3.2.10 access-list(mac extended)
Command: access-list<access-list-number>{deny|permit}{any-source-mac
|{ host-source-mac
<host_smac>}|{<smac><smac-mask>}}{any-destination-mac |
{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}{unta
gged-eth2|tagged-eth2| untagged-802.3 |tagged-802.3}[<offset1>
<length1> <value1> [<offset2> <length2> <value2> [<offset3>
<length3> <value3> [<offset4> <length4> <value4>]]]]]
no access-list <access-list-number>
Functions: Define a standard numeric MAC ACL rule, ‘no access-list <num>’ command
deletes a standard numeric MAC ACL access-list rule
Parameters:
<num> is the access-list No. which is a decimal’s No. from 1100-1199;
deny if rules arematching, deny access; permit if rules are matching, permit access;
<any-source-mac> for any source address; <any-destination-mac> for any destination
address; <host_smac>,<sumac> source MAC address; <sumac-mask> mask (reverse
mask) of source MACaddress; <host_dmac> , <dmac> destination MAC address;
<dmac-mask> mask(reverse mask) of destination MAC address; untagged-eth2 format
of untagged ethernetII packet; tagged-eth2 format of tagged ethernet II packet;
untagged-802-3 format of untagged ethernet 802.3 packet; tagged-802-3 format of
tagged ethernet 802.3 packet;Offset(x) the offset from the packet head, the range is
(12-79), the windows must start from the back of source MAC, and the windows cannot
superpose each other, and that is to say: Offset(x＋1) must be longer than Offset(x)＋len
（x）; Length(x) length is 1-4 ,and Offset(x)＋Length(x) should not be longer than 80
（currently should not be longer than 64）; Value(x) hex expression, Value range:
when Length(x) =1, it is 0-ff ,when Length(x) =2, it is 0-ffff , when Length(x) =3, it is0-ffffff,
when Length(x)
=4, it is0-ffffffff ;
To Next Page
Loading...
Need help?
General