Users Guide

Layer 2 Switching Commands 283
Command History
Updated in 6.3.0.1 firmware. Description updated in the 6.4 release.
Example
console(config)#ip access-list ipv4
console(config-ip-acl)#100 deny ip any any precedence 3
deny | permit (Mac-Access-List-Configuration)
Use the deny command in Mac-Access-List Configuration mode to deny
traffic if the conditions defined in the deny statement are matched. Use the
permit command in Mac-Access-List Configuration mode to allow traffic if
the conditions defined in the permit statement are matched.
Use this command in Mac-Access-List Configuration mode to create a new
rule for the current MAC access list. Each rule is appended to the list of
configured rules for the list, if no sequence number is specified.
The command is enhanced to accept the optional time-range parameter. The
time-range parameter allows imposing a time limitation on the MAC ACL
rule as defined by the parameter time-range-name. If a time range with the
specified name does not exist, and the MAC ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the ACL rule is applied
immediately. If a time range with the specified name exists, and the MAC
ACL containing this ACL rule is applied to an interface or bound to a VLAN,
then the ACL rule is applied when the time-range with a specified name
becomes active. The ACL rule is removed when the time-range with a
specified name becomes inactive.
Use the no form of the command to delete an existing permit/deny clause.
Syntax
[sequence-number] deny | permit (MAC access-list configuration)
[sequence-number] {deny | permit} {{any | srcmac srcmacmask} {any |
bpdu |dstmac dstmacmask}} [ethertypekey | [0x0600-0xFFFF] [vlan {eq 0-
4095}] [secondary-vlan {eq 0-4095}] [cos 0-7] [log] [time-range time-range-
name] [assign-queue queue-id] [{mirror | redirect} interface-id] [rate-limit
rate burst-size]
no sequence-number