Configuration Commands 132
ACL Ethernet Filter configuration
These commands allow you to define Ethernet matching criteria for an ACL. The following table describes the Ethernet
Filter Configuration commands.
Table 154 Ethernet Filter Configuration commands
Command Description
access-control list <1-762> ethernet
source-mac-address <MAC address> {<MAC
mask>}
Defines the source MAC address and MAC mask for this ACL.
For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
Command mode: Global configuration
access-control list <1-762> ethernet
destination-mac-address <MAC address>
{<MAC mask>}
Defines the destination MAC address and MAC mask for this
ACL. For example:
00:60:cf:40:56:00 ff:ff:ff:ff:ff:fc
Command mode: Global configuration
access-control list <1-762> ethernet
vlan <1-4095> <mask>
Defines a VLAN number and mask for this ACL.
Command mode: Global configuration
access-control list <1-762> ethernet
ethernet-type {ARP|IP|IPv6|MPLS|
RARP|any|0xXXXX}
Defines the Ethernet type for this ACL.
Command mode: Global configuration
access-control list <1-762> ethernet
priority <0-7>
Defines the Ethernet priority value for the ACL.
Command mode: Global configuration
default access-control list <1-762>
ethernet
Resets Ethernet parameters for the ACL to their default values.
Command mode: Global configuration
show access-control list {<1-762>}
ethernet
Displays the current Ethernet parameters for the ACL.
Command mode: All except User EXEC
ACL IP Version 4 Filter configuration
These commands allow you to define IPv4 matching criteria for an ACL. The following table describes the IP version 4
Filter Configuration commands.
Table 155 IPv4 Filter Configuration commands
Command Description
access-control list <1-762>
ipv4 source-ip-address <IP
address> {<IP mask>}
Defines a source IP address for the ACL. If defined, traffic with this source IP
address will match this ACL. Specify an IP address in dotted decimal notation.
Command mode: Global configuration
access-control list <1-762>
ipv4 destination-ip-address
<IP address> {<IP mask>}
Defines a destination IP address for the ACL. If defined, traffic with this
destination IP address will match this ACL.
Command mode: Global configuration
access-control list <1-762>
ipv4 protocol <0-255>
Defines an IP protocol for the ACL. If defined, traffic from the specified protocol
matches this filter. Specify the protocol number. Listed below are some of the
well-known protocols.
Number Name
1 icmp
2 igmp
6 tcp
17 udp
89 ospf
112 vrrp
Command mode: Global configuration
access-control list <1-762>
ipv4 type-of-service <0-255>
Defines a Type of Service value for the ACL. For more information on ToS, see
RFC 1340 and 1349.
Command mode: Global configuration
default access-control list
<1-762> ipv4
Resets the IPv4 parameters for the ACL to their default values.
Command mode: Global configuration
To Next Page
Loading...
Need help?
General