User manual

11-9
11.1.6 mark
MAC Extended ACL Config Commands
Use this command to specify a packet to mark.
Syntax
{mark {dot1p <0-7>|tos <0-255>}}
{any|host source MAC address|source MAC source/MAC address mask}
{any|host destination MAC address|destination MAC/ destination MAC address mask}
[vlan vlan-id] [dot1p dot1p-value] [type value|ip|ipv6|arp|vlan| wisp|0-65535]
[log] [rule-precedence access-list-entry precedence]
Parameters
NOTE Use a decimal value representation of ethertypes to implement permit/deny/
mark
designations for a packet. The command set for an Extended MAC ACL
provides the hexadecimal values for each of its listed ether types. The switch
supports all ethertypes. Use the decimal equvilant of the ethertype listed in the
CLI or for any other type of ethertype.
8021p<0-7> Modifies the 802.1p VLAN user priority.
tos<0-255> Modifies the TOS bits in an IP header.
Source MAC Address Bit mask specifying the bits to match. The source wildcard can be
any one of the following:
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx–Source MAC
address and mask.
•
any – Any source host.
•
host – Exact source MAC address to match.
Destination MAC Address Bit mask specifying the bits to match. The destination wildcard can
be any one of the following:
•
xx:xx:xx:xx:xx:xx/xx:xx:xx:xx:xx:xx–Destination
MAC address and mask.
•
any – Any destination host.
•
host – Exact destination MAC address to match.
dot1p<0-7> VLAN 802.1p priority value to match.
rule-precedence<1-5000> Access-list entry precedence.
type(<1-
65535>|arp|ip|ipv6|vlan|wisp)
Ethertype value represented as integer or keywords for well-known
ethertypes like IP, IPv6, ARP etc.
vlan<1-4095> The VLAN tag ID to match.