User's Manual

C OMMAND L INE I NTERFACE
4-141
[no] {permit | deny} untagged-eth2
{any | host source | source address-bitmask}
{any | host destination | destination address-bitmask}
[ethertype protocol [protocol-bitmask]]
[no] {permit | deny} tagged-802.3
{any | host source | source address-bitmask}
{any | host destination | destination address-bitmask}
[vid vid vid-bitmask]
[no] {permit | deny} untagged-802.3
{any | host source | source address-bitmask}
{any | host destination | destination address-bitmask}
• tagged-eth2 – Tagged Ethernet II packets.
• untagged-eth2 – Untagged Ethernet II packets.
• tagged-802.3 – Tagged Ethernet 802.3 packets.
• untagged-802.3 – Untagged Ethernet 802.3 packets.
• any
– Any MAC source or destination address.
• host – A specific MAC address.
• source – Source MAC address.
• destination – Destination MAC address range with bitmask.
• address-
bitmask
26
– Bitmask for MAC address (in hexadecimal format).
• vid – VLAN ID. (Range: 1-4093)
•
vid-bitmask
26
– VLAN bitmask. (Range: 1-4093)
• protocol – A specific Ethernet protocol number. (Range: 600-fff hex.)
• protocol-bitmask
26
– Protocol bitmask. (Range: 600-fff hex.)
Default Setting
None
Command Mode
MAC ACL
Command Usage
• New rules are added to the end of the list.
•The ethertype option can only be used to filter Ethernet II formatted
packets.
26. For all bitmasks, “1” means care and “0” means ignore.