Reference Guide

Command Mode
CONFIGURATION
CONTROL-PLANE
Usage
Information
Use this command in the CONTROL-PLANE mode to apply a control-plane ACL. Control-plane ACLs are
only applied on the ingress traffic. By default, the control-plane ACL is applied to the front-panel ports.
The no version of this command resets the value to the default.
Example
OS10(config)# mac access-group maclist in
OS10(conf-mac-acl)#
Example
(Control-plane
ACL)
OS10# configure terminal
OS10(config)# control-plane
OS10(config-control-plane)# mac access-group maclist in
Supported
Releases
10.2.0E or later; 10.4.1 or later (control-plane ACL)
mac access-list
Creates a MAC access list to filter based on an MAC address.
Syntax
mac access-list access-list-name
Parameters access-list-name — Enter the name of a MAC access list. A maximum of 140 characters.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
None
Example
OS10(config)# mac access-list maclist
Supported
Releases
10.2.0E or later
permit
Configures a filter to allow packets with a specific IP address.
Syntax
permit [protocol-number | icmp | ip | tcp | udp] [A.B.C.D | A.B.C.D/x | any
| host ip-address] [A.B.C.D | A.B.C.D/x | any | host ip-address] [capture |
dscp value| fragment]
Parameters
● protocol-number — (Optional) Enter the protocol number identified in the IP header, from 0 to
255.
● icmp — (Optional) Enter the ICMP address to permit.
● ip — (Optional) Enter the IP address to permit.
● tcp — (Optional) Enter the TCP address to permit.
● udp — (Optional) Enter the UDP address to permit.
● A.B.C.D — Enter the IP address in dotted decimal format.
● A.B.C.D/x — Enter the number of bits that must match the dotted decimal address.
● any — (Optional) Set all routes which are subject to the filter:
○ capture — (Optional) Capture packets the filter processes.
○ dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
○ fragment — (Optional) Use ACLs to control packet fragments.
● host ip-address — (Optional) Enter the IP address to use a host address only.
590 Access Control Lists