Network Router User Manual
42-68
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 42 Configuring PFC QoS
Configuring PFC QoS
To disable VLAN-based QoS filtering in MAC ACLs, perform this task:
Configuring MAC ACLs
You can configure named ACLs that filter IPX, DECnet, AppleTalk, VINES, or XNS traffic based on
MAC addresses (IPX filtering with a MAC ACL is supported only with a PFC3).
In Release 12.2(17b)SXA and later releases in PFC3BXL or PFC3B mode, you can configure MAC
ACLs that do VLAN-based filtering or CoS-based filtering or both.
In Release 12.2(18)SXD and later releases, you can globally enable or disable VLAN-based QoS
filtering in MAC ACLs (disabled by default).
To configure a MAC ACL, perform this task:
When configuring an entry in a MAC-Layer ACL, note the following information:
• The PFC3 supports the ipx-arpa and ipx-non-arpa keywords.
• The PFC2 does not support the ipx-arpa and ipx-non-arpa keywords.
• The vlan and cos keywords are supported in PFC3BXL or PFC3B mode with
Release 12.2(17b)SXA and later releases.
• The vlan and cos keywords are not supported in MAC ACLs used for VACL filtering.
• With Release 12.2(18)SXD and later releases, the vlan keyword for VLAN-based QoS filtering in
MAC ACLs can be globally enabled or disabled and is disabled by default.
• You can enter MAC addresses as three 4-byte values in dotted hexadecimal format. For example,
0030.9629.9f84.
• You can enter MAC address masks as three 4-byte values in dotted hexadecimal format. Use 1 bits
as wildcards. For example, to match an address exactly, use 0000.0000.0000 (can be entered as
0.0.0).
• You can enter an EtherType and an EtherType mask as hexadecimal values.
• Entries without a protocol parameter match any protocol.
Command Purpose
Router(config)# no mac packet-classify use vlan
Disables VLAN-based QoS filtering in MAC ACLs.
Command Purpose
Step 1
Router(config)# mac access-list extended
list_name
Configures a MAC ACL.
Router(config)# no mac access-list extended
list_name
Deletes a MAC ACL.
Step 2
Router(config-ext-macl)# {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any}
[{protocol_keyword | {ethertype_number
ethertype_mask}} [vlan vlan_ID] [cos cos_value]]
Configures an access control entry (ACE) in a MAC ACL.
Router(config-ext-macl)# no {permit | deny}
{src_mac_mask | any} {dest_mac_mask | any}
[{protocol_keyword | {ethertype_number
ethertype_mask}} [vlan vlan_ID] [cos cos_value]]
Deletes an ACE from a MAC ACL.