Manual
+7(495) 797-3311 www.qtech.ru 
Москва, Новозаводская ул., 18, стр. 1 
306 
extended MAC access rule. 
[no]{deny|permit}{any-source-mac|{host-source-
mac<host_smac>}|{<smac><smac-mask>}} {any-
destination-mac|{host-destination-mac 
<host_dmac>}|{<dmac><dmac-mask>}} [untagged-802-
3] 
Creates  an  name-based 
extended  MAC  access  rule 
matching  802.3  frame;  the  no 
form  command  deletes  this 
name-based  extended  MAC 
access rule. 
[no]{deny|permit}{any-source-mac|{host-source-
mac<host_smac>}|{<smac><smac-mask>}}{any-
destination-mac|{host-destination-
mac<host_dmac>}|{<dmac><dmac-mask>}}[tagged-
eth2 [cos <cos-val> [<cos-bitmask>]] [vlanId <vid-
value> [<vid-mask>]] [ethertype<protocol> [<protocol-
mask>]]] 
Creates  an  name-based 
extended  MAC  access  rule 
matching  tagged  ethernet  2 
frame;  the  no  form  command 
deletes  this  name-based 
extended MAC access rule. 
[no]{deny|permit}{any-source-mac|{host-source-mac 
<host_smac>}|{<smac><smac-mask>}} {any-
destination-mac|{host-destination-
mac<host_dmac>}|{<dmac><dmac-mask>}} [tagged-
802-3 [cos <cos-val> [<cos-bitmask>]] [vlanId <vid-
value> [<vid-mask>]]] 
Creates  an  name-based 
extended  MAC  access  rule 
matching  tagged  802.3  frame; 
the no form command deletes 
this name-based extended MAC 
access rule. 
3)  Exit ACL Configuration Mode 
Command 
Explanation 
Extended name-based MAC access configure Mode 
exit 
Quit  the  extended  name-based 
MAC access configure mode. 
(8) Configuring a numbered extended MAC-IP access-list 
Command 
Explanation 
Global mode 
access-list<num>{deny|permit} {any-source-mac| {host-
source-mac <host_smac>} | {<smac> <smac-mask>}} 
{any-destination-mac | {host-destination-mac 
<host_dmac>} | {<dmac><dmac-mask>}} icmp 
{{<source> <source-wildcard>} |any-source| {host-
source <source-host-ip>}} {{<destination> <destination-
wildcard>} | any-destination | {host-destination 
Creates  a  numbered  mac-icmp 
extended mac-ip access rule;  if 
the numbered extended access-
list  of  specified  number  does 
not exist, then an access-list will 
be created using this number. 










