beautypg.com

6 access-list(mac-ip extended), Access, List – PLANET WGSW-50040 User Manual

Page 318: Ip extended

background image

Commands for Security Function Chapter 6 Commands for TACACS+

is the access-list No. which is a decimal’s No. from 1100-1199;

deny if rules are matching, deny access;

permit if rules are matching, permit access;

any source address;

any destination address;

, source MAC address;

is the access-list No. which is a decimal’s No. from 1100-1199;

deny if rules are matching, deny access;

permit if rules are matching, permit access;

any source address;

any destination address;

, source MAC address;

mask (reverse mask) of source MAC address;

, destination MAC address;

mask (reverse mask) of destination MAC address;

untagged-eth2 format of untagged ethernet II packet;

tagged-eth2 format of tagged ethernet II packet;

untagged-802-3 format of untagged ethernet 802.3 packet;

tagged-802-3 format of tagged ethernet 802.3 packet.

Command Mode:

Global mode

Default Configuration:

No access-list configured

Usage Guide:

When the user assign specific for the first time, ACL of the serial number is created, then the

lists are added into this ACL.

Examples: P

Permit tagged-eth2 with any source MAC addresses and any destination MAC addresses and the

packets pass.

Switch(config)#access-list 1100 permit any-source-mac any-destination-mac

tagged-eth2

21.6 access-list(mac-ip extended)

Command:

access-list{deny|permit}{any-source-mac|