Mac Access-List - Cisco 300 Series Cli Manual
Small business 300 series managed switches
command line interface guide release 1.3
Hide thumbs
Also See for 300 Series:
- Cli manual (1117 pages) ,
- Administration manual (586 pages) ,
- Quick start manual (72 pages)
Table of Contents
Advertisement
ACL Commands
78-21075-01 Command Line Interface Reference Guide
•
list-of-flags
match-all
set it is prefixed by "+".If a flag should be unset it is prefixed by "-". Available
options are +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and
-fin. The flags are concatenated to a one string. For example: +fin-ack.
•
time-range-name—Name of the time range that applies to this permit
statement. (Range: 1–32)
•
disable-port—The Ethernet interface is disabled if the condition is matched.
•
log-input—Specifies to send an informational syslog message about the
packet that matches the entry. Because forwarding is done in hardware and
logging is done in software, if a large number of packets match a deny ACE
containing a log-input keyword, the software might not be able to match the
hardware processing rate, and not all packets will be logged.
Default Configuration
No IPv6 access list is defined.
Command Mode
IPv6 Access-list Configuration mode
User Guidelines
The number of TCP/UDP ranges that can be defined in ACLs is limited. If a range of
ports is used for source port in ACE it is not counted again if it is also used for
source port in another ACE. If a range of ports is used for a destination port in ACE
it is not counted again if it is also used for a destination port in another ACE.
If a range of ports is used for source port it is counted again if it is also used for
destination port.
Example
switchxxxxxx(config)# ipv6 access-list server
switchxxxxxx(config-ipv6-al)# deny tcp 3001::2/64 any any 80
48.7
mac access-list
Use the mac access-list Global Configuration mode command to define a Layer 2
access list (ACL) based on source MAC address filtering and to place the device
in MAC Access List Configuration mode. All commands after this command refer
to this ACL. The rules (ACEs) for this ACL are defined in the
—List of TCP flags that should occur. If a flag should be
48
permit ( MAC )
and
781
Advertisement
Table of Contents
