beautypg.com

Allied Telesis AT-8100 Series User Manual

Page 1602

background image

Chapter 99: ACL Commands

1602

Examples

This example creates a Named IP ACL, called “permit

mac,” that permits

packets from source MAC address 12:a3:4b:89:10:98 to any destination
MAC address (00:00:00:00:00:00) on VLAN 15. Then the ACL is assigned
to port 3:

awplus> enable
awplus# configure terminal
awplus(config)# ip access-list permitmac
awplus(config-ip-acl)# permit mac 12:a3:4b:89:10:98
00:00:00:00:00:00
awplus(config-ip-acl)# exit
awplus(config)# interface port1.0.3
awplus(config-if)# access-group permitmac

This example creates an ACL called “deny

mac” that denies packets

containing destination MAC addresses starting with a4:54:84:12. Then the
ACL is assigned to port 12:

awplus> enable
awplus# configure terminal
awplus(config)# ip access-list denymac
awplus(config-ip-acl)# deny mac any a4:54:86:12:00:00
awplus(config-ip-acl)# exit
awplus(config)# interface port1.0.12
awplus(config-if)# access-group denymac