User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

Note: The CLI mode is changed to Mac-Access-List Config when this command is successfully executed.

Format

mac access-list extended <name>

Mode

Global Config

no mac access-list extended <name>

This command deletes a MAC ACL identified by <name> from the system.

Format

no mac

access-list extended <name>

Mode

Global

Config

mac access-list extended rename <name> <newname>

This command changes the name of a MAC Access Control List (ACL). The <name> parameter is the name of an existing MAC ACL. The <newname> parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list.

This command fails if a MAC ACL by the name <newname> already exists.

Format

mac access-list extended rename <name> <newname>

Mode

Global Config

{denypermit} <srcmac> <srcmacmask> <dstmac> <dstmacmask>

This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. Note that an implicit 'deny all' MAC rule always terminates the access list.

Note: The 'no' form of this command is not supported, as the rules within an ACL cannot be deleted individually. Rather, the entire ACL must be deleted and re-specified.

A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and destination MAC value and mask pairs must be specified, each of which may be substituted using the keyword any to indicate a match on any value in that field. The bpdu keyword may be specified for the destination MAC value/mask pair indicating a well-known BPDU MAC value of 01-80-c2-xx-xx-xx (hex), where 'xx' indicates a don't care. The remaining command parameters are all optional.

11-2

Quality of Service (QoS) Commands

202-10088-01, March 2005

Page 266
Image 266
NETGEAR 7300S manual Mac access-list extended rename name newname, Denypermit srcmac srcmacmask dstmac dstmacmask