42-68
Cisco7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter42 Con figuring PFC QoS
Configuring PFCQoS
To disable VLAN-based QoS filtering in MAC ACLs, perform this task:
Configuring MAC ACLs
You can configure named ACLs that filter IPX, DECnet, AppleTalk, VINES, or XNS traffic based on
MAC addresses (IPX filtering with a MAC ACL is supported only with a PFC3).
In Release 12.2(17b)SXA and later releases in PFC3BXL or PFC3B mode, you can configure MAC
ACLs that do VLAN-based filtering or CoS-based filtering or both.
In Release 12.2(18)SXD and later releases, you can globally enable or disable VLAN-based QoS
filtering in MAC ACLs (disabled by default).
To configure a MAC ACL, perform this task:
When configuring an entry in a MAC-Layer ACL, note the following information:
•The PFC3 supports the ipx-arpa and ipx-non-arpa keywords.
•The PFC2 does not support the ipx-arpa and ipx-non-arpa keywords.
•The vlan and cos keywords are supported in PFC3BXL or PFC3B mode with
Release 12.2(17b)SXA and later releases.
•The vlan and cos keywords are not supported in MAC ACLs used for VACL filtering.
•With Release 12.2(18)SXD and later releases, the vlan keyword for VLAN-based QoS filtering in
MAC ACLs can be globally enabled or disabled and is disabled by default.
•You can enter MAC addresses as three 4-byte values in dotted hexadecimal format. For example,
0030.9629.9f84.
•You can enter MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bits
as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as
0.0.0).
•You can enter an EtherType and an EtherType mask as hexadecimal values.
•Entries without a protocol parameter match any protocol.
Command Purpose
Router(config)# no mac packet-classify use vlan Disables VLAN-based QoS filtering in MAC ACLs.
Command Purpose
Step1 Router(config)# mac access-list extended
list_name
Configures a MAC ACL.
Router(config)# no mac access-list extended
list_name
Deletes a MAC ACL.
Step2 Router(config-ext-macl)# {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any}
[{protocol_keyword | {ethertype_number
ethertype_mask}} [vlan vlan_ID] [cos cos_value]]
Configures an access control entry (ACE) in a MAC ACL.
Router(config-ext-macl)# no {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any}
[{protocol_keyword | {ethertype_number
ethertype_mask}} [vlan vlan_ID] [cos cos_value]]
Deletes an ACE from a MAC ACL.