Cisco WS-C3560E-48PD-SF Command Reference - Page 110

deny (MAC access-list configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands lsap lsap-number mask mop-console mop-dump msdos mumps netbios vines-echo vines-ip xns-idp (Optional) Use the LSAP number (0 to 65535) of a packet with 802.2 encapsulation to identify the protocol of the packet. mask is a mask of don't care bits applied to the LSAP number before testing for a match. (Optional) Select EtherType DEC-MOP Remote Console. (Optional) Select EtherType DEC-MOP Dump. (Optional) Select EtherType DEC-MSDOS. (Optional) Select EtherType DEC-MUMPS. (Optional) Select EtherType DEC- Network Basic Input/Output System (NETBIOS). (Optional) Select EtherType Virtual Integrated Network Service (VINES) Echo from Banyan Systems. (Optional) Select EtherType VINES IP. (Optional) Select EtherType Xerox Network Systems (XNS) protocol suite (0 to 65535), an arbitrary Ethertype in decimal, hexadecimal, or octal. Note Though visible in the command-line help strings, appletalk is not supported as a matching condition. To filter IPX traffic, you use the type mask or lsap lsap mask keywords, depending on the type of IPX encapsulation being used. Filter criteria for IPX encapsulation types as specified in Novell terminology and Cisco IOS terminology are listed in Table 2-4. Table 2-4 IPX Filtering Criteria IPX Encapsulation Type Cisco IOS Name arpa snap sap novell-ether Novel Name Ethernet II Ethernet-snap Ethernet 802.2 Ethernet 802.3 Filter Criterion Ethertype 0x8137 Ethertype 0x8137 LSAP 0xE0E0 LSAP 0xFFFF Defaults This command has no defaults. However; the default action for a MAC-named ACL is to deny. Command Modes MAC-access list configuration Command History Release 12.1(19)EA1 Modification This command was introduced. 2-78 Catalyst 3560 Switch Command Reference 78-16405-05