AMX NXA-ENET24 MAC ACL Commands, Command Function Access-list mac Syntax, Permit, deny Syntax

CLI (Command Line Interface)

MAC ACL Commands

MAC ACL Commands

Command	Function
access-list mac	Syntax:
This command adds a MAC	[no] access-list mac acl_name
access list and enters MAC ACL	• acl_name – Name of the ACL.
configuration mode.	(Maximum length: 16 characters)
Use the no form to remove the	Default Setting: None
specified ACL.	Command Mode: Global Configuration
	Command Usage: When you create a new ACL or enter configuration
	mode for an existing ACL, use the permit or deny command to add new
	rules to the bottom of the list. To create an ACL, you must add at least one
	rule to the list.
	To remove a rule, use the no permit or no deny command followed by the
	exact text of a previously configured rule.
	An ACL can contain up to 32 rules.
	Example:
	Console(config)#access-list mac jerry
	Console(config-mac-acl)#
permit, deny	Syntax:
(MAC ACL)	[no] {permit deny}
This command adds a rule to a	{any host source source address-bitmask}
	{any host destination destination address-bitmask}
MAC ACL. The rule filters packets	[vid vid [vid-end]] [ethertype protocol [protocol-end]]
matching a specified MAC source	Note: The default is for Ethernet II packets.
or destination address (i.e., physi-	• any – Any MAC source or destination address.
cal layer address), or Ethernet	• host – A specific MAC address.
protocol type.
	• source – Source MAC address.
Use the no form to remove a rule.
	• destination – Destination MAC address range with bitmask.
	• address-bitmask – Bitmask for MAC address (in hexidecimal format). For
	all bitmasks, “1” means care and “0” means ignore.
	• vid – VLAN ID. (Range: 1-4094)
	• vid-end – Upper bound of VID range. (Range: 1-4094)
	• protocol – A specific Ethernet protocol number.
	(Range: 0-65535)
	• protocol-end – Upper bound of protocol range.
	(Range: 0-65535)
	Default Setting: None
	Command Mode: MAC ACL
	Command Usage: New rules are added to the end of the list.
	The ethertype option can only be used to filter Ethernet II formatted pack-
	ets. A detailed listing of Ethernet protocol types can be found in RFC 1060.
	A few of the more common types include the following:
	• 0800 - IP
	• 0806 - ARP
	• 8137 - IPX
	Example:
	This rule permits packets from any source MAC address to the destination
	address 00-e0-29-94-34-de where the Ethernet type is 0800:
	Console(config-mac-acl)#permit any host 00-e0-29-94-34-de
	ethertype 0800
	Console(config-mac-acl)#

218 NXA-ENET24 - Software Management Guide