Motorola RF Switch CLI Reference Guide
17-16
The permit command in the MAC ACL disallows traffic based on layer 2 (data-link layer)
information. A MAC access list permits traffic from a source MAC address or any MAC
address. It also has an option to allow traffic from a list of MAC addresses (based on the
source mask).
The MAC access list can be configured to allow traffic based on VLAN information,
ethernet type. Common types include:
•arp
•wisp
•ip
• 802.1q
The switch (by default) does not allow layer 2 traffic to pass through the interface. To
adopt an access port through an interface, configure an access control list to allow an
ethernet WISP. .
The last ACE in the access list is an implicit deny statement. Whenever the interface
receives the packet, its content is checked against all the ACEs in the ACL. It is allowed/
denied based on the ACL’s configuration.
17.1.8.1 Example - Permitting WISP Traffic
The example below permits WISP traffic from any source MAC address to any destination
MAC address:
RFSwitch(config-ext-macl)#permit any any type wisp
RFSwitch(config-ext-macl)#
17.1.8.2 Example - Permitting ARP Traffic
The example below permits arp based traffic from any source MAC address to any
destination MAC address:
RFSwitch(config-ext-macl)#permit any any type arp
RFSwitch(config-ext-macl)#
NOTE: To apply an IP based ACL to an interface, a MAC access list
entry to allow ARP is mandatory. A MAC ACL always takes precedence
over IP based ACLs.
To Next Page
Loading...
Need help?
General
