Supermicro SSE-F3548S - Page 221

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
221
redirect<interface-type><interface-id> { any |
host<src-mac-address>}{ any | host<dest-
mac-address> }
priority<value (1-65535)>][ Vlan<vlan-id (1-
4069)>] [priority<value (1-255)>]
The protocol keyword can be used to
configure the Ethernet header Encap
Type field to be matched to apply this
ACL rule.
This protocol is an optional parameter.
If not provided, switch will not check
this field while matching packets for
this ACL.
If this ACL rule is to be applied only to a
particular VLAN, user can configure
VLAN number using Vlan keyword.
This Vlan is an optional parameter. If
not provided, the switch will not check
VLAN while matching packets for this
ACL.
The priority keyword lets user assign a
priority for this ACL rule.
This priority is an optional parameter. It
can be any value from 1 to 255. The
default value is 1.
Redirect ACL rule needs additional
<interface-type><interface-
id>parameters to definethe port to
which the packets matching this ACL
rule need to be redirected.
Step 4
show access-lists
Displays the configured ACL rules
Step 5
write startup-config
Optional step – Saves this ACL
configuration to be part of startup
configuration.
Every ACL is applied to all ports by default. Any ACL that needs to be applied only to
particular ports needs to be configured as described in section Applying MAC Extended ACL
to Interfaces
.
The below examples show various ways of creatinga a MAC Extended ACL.
Create a deny MAC Extended ACL with ACL number 100 to deny all traffic from MAC 00:25:90:01:02:03
SMIS# configure terminal
SMIS(config)# mac access-list extended 100
SMIS(config-ext-macl)# deny host 00:25:90:01:02:03 any