Cisco Systems 6500, EA6500 Configuring MAC-Layer Named Access Lists (Optional)

31-39

Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E

78-14099-04

Chapter 31 Configuring PFC QoS

Configuring PFC QoS

Configuring MAC-Layer Named Access Lists (Optional)

In Release 12.1(1)E and later releases, you can configure named access lists that filter DECnet,

AppleTalk, VINES, or XNS traffic based on Layer 2 addresses.

To configure a MAC-Layer named access list, perform this task:

When configuring an entry in a MAC-Layer access list, note the following:

• You can enter MAC addresses as three 4-byte values in dotted hexadecimal format. For example,

0030.9629.9f84.

• You can enter MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bits

as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as

0.0.0).

• Entries without a protocol parameter match any protocol.

• Access lists entries are scanned in the order you enter them. The first matching entry is used. To

improve performance, place the most commonly used entries near the beginning of the access list.

• An implicit deny any any entry exists at the end of an access list unless you include an explicit

permit any any entry at the end of the list.

• All new entries to an existing list are placed at the end of the list. You cannot add entries to the

middle of a list.

This list shows the ethertype values matched by the protocol keywords:

• 0x0600—xns-idp—Xerox XNS IDP

• 0x0BAD—vines-ip—Banyan VINES IP

• 0x0baf—vines-echo—Banyan VINES Echo

• 0x6000—etype-6000—DEC unassigned, experimental

• 0x6001—mop-dump—DEC Maintenance Operation Protocol (MOP) Dump/Load Assistance

• 0x6002—mop-console—DEC MOP Remote Console

• 0x6003—decnet-iv—DEC DECnet Phase IV Route

• 0x6004—lat—DEC Local Area Transport (LAT)

Command Purpose

Step 1 Router(config)# mac access-list extended

list_name

Configures a MAC-Layer named access list.

Router(config)# no mac access-list extended

list_name

Deletes a MAC-Layer named access list.

Step 2 Router(config-ext-macl)# {permit | deny}

{src_mac_mask | any} {dest_mac_mask | any} [aarp

dec-spanning | dsm | etype-6000 | etype-8042 |

mumps | netbios | vines-ip | vines-echo | xns]

Configures an access control entry (ACE) in a

MAC-Layer named access list.

Router(config-ext-macl)# no {permit | deny}

{src_mac_mask | any} {dest_mac_mask | any} [aarp

dec-spanning | dsm | etype-6000 | etype-8042 |

mumps | netbios | vines-ip | vines-echo | xns]

Deletes an ACE from a MAC-Layer named access list.