User`s manual

User’s Manual 269
host A specific MAC address.
source Source MAC address.
destination Destination MAC address range with bitmask.
address-bitmask Bitmask for MAC address (in hexadecimal format) ) (1 means care and 0
means ignore).
vid VLAN ID. (Range: 1-4095).
vid-bitmask VLAN bitmask. (Range: 1-4095) (1 means care and 0 means ignore).
protocol A specific Ethernet protocol number. (Range: 600-fff hex.)
protocol-bitmask Protocol bitmask. (Range: 600-fff hex.) (1 means care and 0 means ignore).
Default
None
Command Mode
MAC ACL
Usage Guidelines
New rules are added to the end of the list.
The ethertype option can only be used to filter Ethernet II formatted packets.
A detailed listing of Ethernet protocol types can be found in RFC 1060. A few of the more common types
include the following:
• 0800 - IP
• 0806 - ARP
• 8137 - IPX
Example
This rule permits packets from any source MAC address to the destination address 00-e0-29-94-34-de
where the Ethernet type is 0800.
Console(config-mac-acl)#permit any host 00-e0-29-94-34-de ethertype 0800
Console(config-mac-acl)#
Related Commands
access-list mac