User`s manual

258 Asanté IntraCore 36000 Series
Console#
This example creates an Egress MAC ACL.
Console(config)#access-list mac M5
Console(config-mac-acl)#deny tagged-802.3 host 00-11-11-11-11-11 any
Console(config-mac-acl)#deny tagged-eth2 00-11-11-11-11-11 ff-ff-ff-ff-ff-ff
any vid 3 ethertype 0806
Console(config-mac-acl)#end
Console#show access-list
MAC access-list M5:
deny tagged-802.3 host 00-11-11-11-11-11 any
deny tagged-eth2 host 00-11-11-11-11-11 any vid 3 ethertype 0806
Console#configure
Console(config)#access-list mac mask-precedence out
Console(config-mac-mask-acl)#mask pktformat ff-ff-ff-ff-ff-ff any vid
Console(config-mac-mask-acl)#exit
Console(config)#interface ethernet 1/5
Console(config-if)#mac access-group M5 out
Console(config-if)#end
Console#show access-list
MAC access-list M5:
deny tagged-eth2 host 00-11-11-11-11-11 any vid 3 ethertype 0806
deny tagged-802.3 host 00-11-11-11-11-11 any
MAC ingress mask ACL:
mask pktformat host any vid ethertype
Console#
16.109 match access-list ip
This command changes the IEEE 802.1p priority, IP Precedence, or DSCP Priority of a frame matching the
defined ACL rule. (This feature is commonly referred to as ACL packet marking.) Use the no form to remove
the ACL marker.
Syntax Description
match access-list ip acl_name [set priority priority] {set precedence
precedence_value | set dscp dscp_value}
no match access-list ip acl_name
acl_name Name of the ACL. (Maximum length: 16 characters)
priority Class of Service value in the IEEE 802.1p priority tag. (Range: 0-7; 7 is the
highest)
precedence_value IP Precedence value. (Range: 0-7)
dscp_value Differentiated Services Code Point value. (Range: 0-63)
Default
None