PLANET XGS3-24040 - Manual (Page 445)

Chapter 46 ACL Configuration
46-7
(7) Configuring a extended MAC access-list based on nomenclature
a. Create a extensive MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended
no mac-access-list extended
Creates an extended
name-based MAC access rule
for other IP protocols; the “no”
form command deletes this
name-based extended MAC
access rule.
b. Specify multiple “permit” or “deny” rule entries
Command Explanation
Extended name-based MAC access rule Mode
[no]{deny|permit}{any-source-mac|{host-source-ma
c}|{}}
{any-destination-mac|{host-destination-mac
} |{ }} [cos
[] [vlanId
[][ethertype[]
]]]
[no]{deny|permit}{any-source-mac|{host-source-ma
c}|{}}{any-destin
ation-mac|{host-destination-mac}|{
mac>}}[ethertype[
-mask>]]
[no]{deny|permit}{any-source-mac|{host-source-ma
c}|{<smac>>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac>>}}[vlanId<vid-value>[<vid-mask>]
[ethertype<protocol>[<protocol-mask>]]]
Creates an extended
name-based MAC access rule
matching MAC frame; the
“no” form command deletes
this name-based extended
MAC access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c}|{}}{any-destin
ation-mac|{host-destination-mac}|{
mac>}}[untagged-eth2 [ethertype
[protocol-mask]]]
Creates an extended
name-based MAC access rule
matching untagged ethernet 2
frame; the “no” form
command deletes this
name-based extended MAC
access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma Creates an MAC access rule