mac

368
configuration of corresponding position, then initialization of TCP data report is enabled to
form a match when in connection; precedence (optional) packets can be filtered by
priority which is a number from 0-7; tos (optional) packets can be filtered by service type
which ia number from 0-15; icmp-type (optional) ICMP packets can be filtered by packet
type which is a number from 0-255; icmp-code (optional) ICMP packets can be filtered by
packet code which is a number from 0-255; igmp-type (optional) ICMP packets can be
filtered by IGMP packet name or packet type which is a number from 0-255;
<time-range-name>, name of time range
Command Mode: Global mode
Default Configuration: No access-list configured.
Usage Guide: When the user assign specific <num> for the first time, ACL of the serial
number is created, then the lists are added into this ACL; the access list which marked
3200-3299 can configure not continual reverse mask of IP address.
Examples: Permit the passage of TCP packet with source MAC 00-12-34-45-XX-XX, any
destination MAC address, source IP address 100.1.1.0 0.255.255.255, and source port
100.
Switch(config)#access-list 3199 permit 00-12-34-45-67-00 00-00-00-00-FF-FF
any-destination-mac tcp 100.1.1.0 0.255.255.255 s-port 100 any-destination
24.7 access-list(mac standard)
Command: access-list <num> {deny|permit} {any-source-mac | {host-source-mac
<host_smac> } | {<smac> <smac-mask>} }
no access-list <num>
Functions: Define a standard numeric MAC ACL rule, no command deletes a standard
numeric MAC ACL access-list rule.
Parameters: <num> is the access-list No. which is a decimal‘s No. from 700-799; deny if
rules are matching, deny access; permit if rules are matching, permit access;
<host_smac>, <sumac> source MAC address; <sumac-mask> mask (reverse mask) of
source MAC address.
Command Mode: Global mode
Default Configuration: No access-list configured.
Usage Guide: When the user assign specific <num> for the first time, ACL of the serial
number is created, then the lists are added into this ACL.
Examples: Permit the passage of packets with source MAC address 00-00-XX-XX-00-01,
and deny passage of packets with source MAC address 00-00-00-XX-00-ab.
Switch(config)# access-list 700 permit 00-00-00-00-00-01 00-00-FF-FF-00-00