Quality of Service (QoS) Commands 45
© 2001- 2006 Hirschmann Automation and Control GmbH. All Rights Reserved.
The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields, respectively,
of the VLAN tag. For packets containing a double VLAN tag, this is the first (or outer) tag.
The assign-queue parameter allows specification of a particular 802.1p user priority for traffic that
matches this rule. The allowed
<queue-id> value is 0-7. The matching traffic is transmitted with the
modified 802.1p user priority.
The redirect parameter allows the traffic matching this rule to be forwarded to the specified
<slot/
port>
. The assign-queue and redirect parameters are only valid for a 'permit' rule.
Format {deny|permit} {{<srcmac> <srcmacmask>} | any} {{<dstmac> <dst-
macmask>} | any| bpdu} [<ethertypekey> | <0x0600-0xFFFF>] [vlan
eq <0-4095> | cos <0-7>] [secondary-vlan eq <0-4095>] [second-
ary-cos <0-7>] [assign-queue <queue-id>] [redirect <slot/port>]
Note: The special command form {deny|permit} any any is used to match all Ethernet
layer 2 packets, and is the equivalent of the IP access list "match every" rule.
Mode Mac-Access-List Config
5.1.4 mac access-group
This command attaches a specific MAC Access Control List (ACL) identified by <name> to an
interface in the inbound direction. The <
name> parameter must be the name of an existing MAC ACL.
An optional sequence number may be specified to indicate the order of this mac access list relative to
other mac access lists already assigned to this interface and direction. A lower number indicates higher
precedence order. If a sequence number is already in use for this interfac, the specified mac access list
replaces the currently attached mac access list using that sequence number. If the sequence number is
not specified for this command, a sequence number that is one greater than the highest sequence number
currently in use for this interface and direction is used.
This command specified in Interface Config mode only affects a single interface, whereas the Global
Config mode setting is applied to all interfaces.
Format mac access-group <name> in [sequence <1-4294967295>]
Modes Global Config
Interface Config
5.1.4.1 no mac access-group
This command removes a MAC ACL identified by <name> from the interface in a given direction.
Format no mac access-group <name> in
Modes Global Config
Interface Config
5.1.5 show mac access-lists
This command displays a MAC access list and all of the rules that are defined for the MAC ACL. The
[name] parameter is used to identify a specific MAC ACL to display.
Format show mac access-lists [name]
Mode Privileged EXEC
Rule Number The ordered rule number identifier defined within the MAC ACL.
To Next Page
Loading...
Need help?
General
