Digitalchina Networks DCS-3950 series User Manual

271
DCS-3950 series Ethernet switch manual
{any-destination-mac|{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}
[untagged-802-3]
[no]{deny|permit}
{any-source-mac|{host-source-mac<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}
[tagged-eth2 [cos <cos-val> [<cos-bitmask>]] [vlanId <vid-value> [<vid-mask>]]
[ethertype<protocol> [<protocol-mask>]]]
[no]{deny|permit}
{any-source-mac|{host-source-mac<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}
[tagged-802-3 [cos <cos-val> [<cos-bitmask>]] [vlanId <vid-value> [<vid-mask>]]]
Functions: Define an expansion name MAC ACL rule, and ‘no’ for this command deletes
this expansion name IP access rule.
Parameters: any-source-mac: any source of MAC address; any-destination-mac: any
destination of MAC address; host_smac , smac: source MAC address; smac-mask:
mask (reverse mask) of source MAC address ; host_dmac , dmas destination MAC
address; dmac-mask mask (reverse mask) of destination MAC address; untagged-eth2
format of untagged ethernet II packet; tagged-eth2 format of tagged ethernet II packet;
untagged-802-3 format of untagged ethernet 802.3 packet; tagged-802-3 format of
tagged ethernet 802.3 packet; cos-val: cos value, 0-7; cos-bitmask: cos mask,
0-7reverse mask and mask bit is consecutive; vid-value: vlan No, 1-4094;
vid-bitmask :vlan mask, 0-4095, reverse mask and mask bit is consecutive; protocol:
specific Ethernet protocol No., 1536-65535; protocol-bitmask: protocol mask, 0-65535,
reverse mask and mask bit is consecutive.
Notice: mask bit is consecutive means the effective bit must be consecutively effective
from the first bit on the left, no ineffective bit can be added through. For example: the
reverse mask format of one byte is: 00001111b; mask format is 11110000; and this is not
permitted: 00010011.
Command mode: Name expansion MAC access-list configuration mode
Default: No access-list configured
Usage Guide: None.
Example: Configure the switch to deny any packets destinated to 00-00-aa-bb-cc-xx with
ethernet frame tag as ethernet II and ethernet protocol number as 2048.
Switch(Config-Mac-Ext-Nacl-me)#deny any-source-mac 00-00-aa-bb-cc-01 00-00-00-00
-00-ff tagged-eth2 ethertype 2048
15.3.2.13 access-list(mac-ip extended)
Command:
[no]
{deny|permit}{any-source-mac|{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}
{any-destination-mac|{host-destination-mac<host_dmac>}|{<dmac><dmac-mask>}}
icmp{{<source><source-wildcard>}|any|{host<source-host-ip>}}

Digitalchina Networks DCS-3950 series Specifications

General

Brand	Digitalchina Networks
Model	DCS-3950 series
Category	Network Router
Language	English