Cisco WS-C3560E-48PD-SF Command Reference - Page 109
deny (MAC access-list configuration
View all Cisco WS-C3560E-48PD-SF manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 109 highlights
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (MAC access-list configuration) deny (MAC access-list configuration) Use the deny MAC access-list configuration command to prevent non-IP traffic from being forwarded if the conditions are matched. Use the no form of this command to remove a deny condition from the named MAC access list. {deny | permit} {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask} [type mask | aarp | amber | cos cos | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask |mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip | xns-idp] no {deny | permit} {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask} [type mask | aarp | amber | cos cos | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip | xns-idp] Syntax Description any host src MAC-addr | src-MAC-addr mask host dst-MAC-addr | dst-MAC-addr mask type mask aarp amber cos cos dec-spanning decnet-iv diagnostic dsm etype-6000 etype-8042 lat lavc-sca Keyword to specify to deny any source or destination MAC address. Define a host MAC address and optional subnet mask. If the source address for a packet matches the defined address, non-IP traffic from that address is denied. Define a destination MAC address and optional subnet mask. If the destination address for a packet matches the defined address, non-IP traffic to that address is denied. (Optional) Use the Ethertype number of a packet with Ethernet II or SNAP encapsulation to identify the protocol of the packet. The type is 0 to 65535, specified in hexadecimal. The mask is a mask of don't care bits applied to the Ethertype before testing for a match. (Optional) Select Ethertype AppleTalk Address Resolution Protocol that maps a data-link address to a network address. (Optional) Select EtherType DEC-Amber. (Optional) Select a class of service (CoS) number from 0 to 7 to set priority. Filtering on CoS can be performed only in hardware. A warning message reminds the user if the cos option is configured. (Optional) Select EtherType Digital Equipment Corporation (DEC) spanning tree. (Optional) Select EtherType DECnet Phase IV protocol. (Optional) Select EtherType DEC-Diagnostic. (Optional) Select EtherType DEC-DSM. (Optional) Select EtherType 0x6000. (Optional) Select EtherType 0x8042. (Optional) Select EtherType DEC-LAT. (Optional) Select EtherType DEC-LAVC-SCA. 78-16405-05 Catalyst 3560 Switch Command Reference 2-77