XGS-5240-Series User Manual

Configuration Guide of XGS-5240-Series
45-11
(5) Configuring a numbered standard MAC access-list
Command
Explanation
Global Mode
access-list<num>{deny|permit}{any-source-mac|{ho
st-source-mac<host_smac>}|{<smac><smac-mas
k>}}
no access-list <num>
Creates a numbered standa
rd MAC access-list, if the a
ccess-list already exists, the
n a rule will add to the curr
ent access-list; the “no acc
ess-list <num>“ command
deletes a numbered standar
d MAC access-list.
(6) Creates a numbered MAC extended access-list
Command
Explanation
Global Mode
access-list<num> {deny|permit} {any-source-mac|
{host-source-mac<host_smac>}|{<smac><smac-ma
sk>}}{any-destination-mac|{host-destination-mac<h
ost_dmac>}|{<dmac><dmac-mask>}}[{untagged-eth
2 | tagged-eth2 | untagged-802-3 | tagged-802-3}
[ <offset1> <length1> <value1> [ <offset2> <lengt
h2> <value2> [ <offset3> <length3> <value3> [ <o
ffset4> <length4> <value4> ]]]]]
no access-list <num>
Creates a numbered MAC
extended access-list, if the
access-list already exists, th
en a rule will add to the cu
rrent access-list; the “no ac
cess-list <num>“ command
deletes a numbered MAC
extended access-list.
(7) Configuring a extended MAC access-list based on nomenclature
a. Create an extensive MAC access-list based on nomenclature
Command
Explanation
Global Mode
mac-access-list extended <name>
no mac-access-list extended <name>
Creates an extended name-
based MAC access rule for
other IP protocols; the no
form command deletes this
name-based extended MAC
access rule.
b. Specify multiple “permit” or “deny” rule entries
Command
Explanation