access-list mac Configuring Access Control Lists
Enterasys C3 Configuration Guide 34-9
To move entries within an ACL:
access-list mac name move destination source1 [source2]
Parameters
Defaults
If insert, replace, or move are not specified, the new entry will be appended to the access list.
Mode
Global configuration: C3(su)->router(Config)#
mac name
[entryno [entryno]]
Specifies the name of the MAC-based access list. The name can be from 1
to 31 characters in length and is case-sensitive.
When using the no access-list command, you can delete a whole access-
list, or only specific entries in the list with the optional entryno
parameter. Specify a range of entries by entering the start and end entry
numbers.
deny | permit Denies or permits access if specified conditions are met.
srcmac | any Specifies the MAC address of the source of the packet. If any is
specified, any MAC address can be the source.
The format of the MAC address can be xx-xx-xx-xx-xx-xx or
xx:xx:xx:xx:xx:xx.
destmac | any Specifies the MAC address of the destination of the packet. If any is
specified, any MAC address can be the destination.
The format of the MAC address can be xx-xx-xx-xx-xx-xx or
xx:xx:xx:xx:xx:xx.
ethertype ethertype (Optional) Specifies the Ethernet II type of the packet. You can specify
the type with either one of the following key words, or a four digit
hexidecimal number in the range 0x0600 to 0xFFFF.
Key words are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast,
mplsucast, netbior, novell, pppoe, rarp.
vlan vlan-id (Optional) Specifies a VLAN to match. The vlan-id can range from 1 to
4094.
priority pri (Optional) Specifies a 802.1p priority value to match. The pri can range
from 0 to 7.
insert | replace
entryno
(Optional) Inserts this new entry before a specified entry in an existing
ACL, or replaces a specified entry with this new entry.
move destination
source1 source2
(Optional) Moves a sequence of access list entries before another entry.
Destination is the number of the existing entry before which this new
entry will be moved. Source1 is a single entry number or the first entry
number in the range to be moved. Source2 (optional) is the last entry
number in the range to be moved. If source2 is not specified, only the
source1 entry will be moved.
assign-queue queue-id (Optional) Specifies the queue to which a packet matching the permit
rule will be assigned. Valid values for queue-id are from 0 to 5.
To Next Page
Loading...
Need help?
General