mac

Commands for ACL
423
<sMask > is the reverse mask of source IP, the format is dotted decimal notation.
Command Mode: Name standard IP access-list configuration mode
Default: No access-list configured.
Example: Permit packets with source address 10.1.1.0/24 to pass, and deny other
packets with source address 10.1.1.0/16.
Switch(config)# access-list ip standard ipFlow
Switch(Config-Std-Nacl-ipFlow)# permit 10.1.1.0 0.0.0.255
Switch(Config-Std-Nacl-ipFlow)# deny 10.1.1.0 0.0.255.255
36.23 permit | deny(ipv6 extended)
This command is not supported by switch.
36.24 permit | deny(ipv6 standard)
Command: [no] {deny | permit} {{<sIPv6Prefix/sPrefixlen>} | any-source |
{host-source <sIPv6Addr>}}
Function: Create a standard nomenclature IPv6 access control rule; the no form of this
command deletes the nomenclature standard IPv6 access control rule.
Parameter: <sIPv6Prefix> is the prefix of the source IPv6 address, <sPrefixlen> is the
length of the IPv6 address prefix, the valid range is 1~128. <sIPv6Addr> is the source
IPv6 address.
Command Mode: Standard IPv6 nomenclature access list mode
Default: No access list configured by default.
Usage Guide:
Example: Permit packets with source address of 2001:1:2:3::1/64 while denying those
with source address of 2001:1:2:3::1/48.
Switch(config)#ipv6 access-list standard ipv6Flow
Switch(Config-IPv6-Std-Nacl-ipv6Flow)# permit 2001:1:2:3::1/64
Switch(Config-IPv6-Std-Nacl-ipv6Flow)# deny 2001:1:2:3::1/48
36.25 permit | deny(mac extended)
Command:
[no]{deny|permit} {any-source-mac|{host-source-mac <host_smac> }|{ <smac>
<smac-mask> }} {any-destination-mac|{host-destination-mac
<host_dmac> }|{ <dmac> <dmac-mask> }} [cos <cos-val> [ <cos-bitmask> ]]