Specifications

deny (mac access-list extended)
282
deny (mac access-list extended)
Specifies the conditions by which the MAC filter denies access.
Syntax
To set or change information:
[<Seq>] deny {<Src MAC> <Src MAC mask> | host <Src MAC> | any} {<Dst
MAC>
<Dst MAC mask> | host <Dst MAC> | any | bpdu | cdp | lacp | lldp
| oadp | pvst-plus-bpdu } [
<Ethernet type>] [vlan <VLAN ID>]
[user-priority <Priority>]
To delete information:
no <Seq>
Input mode
(config-ext-macl)
Parameters
<Seq>
Specifies the sequence in which filter conditions are applied.
1. Default value when this parameter is omitted:
10 is set as the initial value if there are no conditions in the access list.
If conditions have been set, the initial value is the maximum value for the
application sequence that has been set plus 10.
Note, however, that if the maximum value for the application sequence is
greater than 4294967285, the value cannot be omitted.
2. Range of values:
Specify 1 to 4294967295 in decimal.
{<Src MAC> <Src MAC mask> | host <Src MAC> | any}
Specifies the source MAC address.
To specify all source MAC addresses, specify
any.
1. Default value when this parameter is omitted:
This parameter cannot be omitted.
2. Range of values:
Specify <Src MAC> <Src MAC mask>,
host <Src MAC>, or any.
- <Src MAC> <Src MAC mask> specification:
Specify the source MAC address for <Src MAC>.
- For <Src MAC mask>, specify a mask in MAC address format that sets
bits that permit an arbitrary value in the MAC address.
host <Src MAC>
specification:
The filter condition is a perfect match of <Src MAC>.
-
any specification:
The source MAC address is not included as a filter condition.
MAC address (nnnn.nnnn.nnnn): 0000.0000.0000 to ffff.ffff.ffff (hexadecimal)