Reference v4.1.0 Instruction Manual

Network OS Command Reference 649
53-1003115-01
seq (extended MAC ACLs)
2
seq (extended MAC ACLs)
Inserts a rule anywhere in the MAC ACL.
Synopsis seq value [deny | permit] [any | host MAC_ADDRESS| MAC_ADDRESS] [any | host
MAC_ADDRESS| MAC_ADDRESS] [EtherType |arp |fcoe | ipv4] [count]
no seq value
Operands value Specifies the sequence number for the rule. Valid values range from 0
through 65535.
permit Specifies rules to permit traffic.
deny Specifies rules to deny traffic.
any Specifies any source MAC address.
host MAC_ADDRESS
Specifies the source host MAC address for which to set permit or deny
conditions. Use the format HHHH.HHHH.HHHH.
MAC_ADDRESS
Specifies the destination host MAC address for which to set permit or deny
conditions. Use the format HHHH.HHHH.HHHH.
any Specifies any destination MAC address.
host MAC_ADDRESS
Specifies the source host address for which to set permit or deny
conditions. Use the format HHHH.HHHH.HHHH.
MAC_ADDRESS Specifies the destination host address for which to set permit or deny
conditions. Use the format HHHH.HHHH.HHHH.
EtherType Specifies the protocol number for which to set the permit or deny
conditions. Valid values range from 1536 through 65535.
arp Specifies to permit or deny the Address Resolution Protocol (0x0806).
fcoe Specifies to permit or deny the Fibre Channel over Ethernet
Protocol (0x8906).
ipv4 Specifies to permit or deny the IPv4 protocol (0x0800).
count Enables the counting of the packets matching the rule.
Defaults No MAC ACLs are configured.
Command Modes Feature Access Control List configuration mode
Description Use this command to insert a rule anywhere in the MAC ACL; it configures rules to match and
permits or drops traffic based on the source and destination MAC addresses, and the protocol
type. You can also enable counters for a specific rule. There are 255 ACL counters supported per
port group.
Usage Guidelines The first set of [any | host MAC_ADDRESS | MAC_ADDRESS] parameters is specific to the source
MAC address. The second set of [an
y | host MAC_ADDRESS | MAC_ADDRESS] parameters is
specific to the destination MAC address.