SGS-6341-Series User Manual

(7) Configuring a extended MAC access-list based on
nomenclature
a. Create an extensive MAC access-list based on nomenclature
Command Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name>
Creates an extended
name-based MAC access rule
for other IP protocols; the no
form command deletes this
name-based extended MAC
access rule.
b. Specify multiple “permit” or “deny” rule entries
Command Explanation
Extended name-based MAC access rule Mode
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>} |{<dmac> <dmac-mask>}} [cos
<cos-val> [<cos-bitmask>] [vlanId <vid-value>
[<vid-mask>][ethertype<protocol>[<protocol-mask>]
]]]
Creates an extended
name-based MAC access rule
matching MAC frame; the no
form command deletes this
name-based extended MAC
access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}{any-destin
ation-mac|{host-destination-mac<host_dmac>}|{<d
mac><dmac-mask>}}[untagged-eth2 [ethertype
<protocol> [protocol-mask]]]
Creates an extended
name-based MAC access rule
matching untagged ethernet 2
frame; the no form command
deletes this name-based
extended MAC access rule.
[no]{deny|permit}{any-source-mac|{host-source-ma
c<host_smac>}|{<smac><smac-mask>}}
{any-destination-mac|{host-destination-mac
<host_dmac>}|{<dmac><dmac-mask>}}
[untagged-802-3]
Creates an name-based
extended MAC access rule
matching 802.3 frame; the no
form command deletes this
name-based extended MAC
access rule.
41-56
User’s Manual of SGS-6341 series