Extended MAC ACL Instance
17-15
Usage Guidelines
When creating a Port ACL, the switch (by default) does not permit an ethertype WISP.
Create a rule to allow WISP to adopt access ports. Use the following command to adopt
access ports:
permit any any type wisp
permit [<dest-IP/
Mask>|any|host <IP>]
{<ICMP-type> {<ICMP-code>}}
Bit mask specifying the bits to match. The
destination wildcard can be one of the following:
• xx:xx:xx:xx:xx:xx/
xx:xx:xx:xx:xx:xx – Destination
MAC address and mask
• any – Uses any available destination host
• host – Defines the destination MAC address
dot1p<0-7> Establishes the 802.1p priority
rule-precedence<1-5000> Defines an access list entry precedence
type(8021q|<1-
65535>|aarp|arp|appletalk|ip|ipv6|
ipx|rarp|vlan|wisp)
Sets an ethertype
• 8021q – VLAN Ether type (0*8100)
• <1-65535> – Ether protocol number
• aarp – AARP Ether Type ( 0*80F3)
• appletalk – APPLETALK Ether Type (0*809B)
• arp – ARP Ether Type (0*0806)
• ip – IP Ether Type (0*0800)
• ipv6 – IPv6 Ether Type (0*86DD)
• ipx – IPX Ether Type (0*8137)
• rarp – RARP Ether Type (0*8035)
• wisp – WISP Ether Type (0*8783)
vlan<1-4095> Sets the VLAN ID
NOTE: Use the following command to attach a MAC access list to a
port on a layer 2 interface:
mac access-group <acl number/name> in
To Next Page
Loading...
