D-Link DGS-6600-48T Product Manual - Page 474

DGS-6604 m Command Mode Usage Guideline Example permit | deny (mac access-list) MAC access-list extended configuration The time-range profile must be created before it can be specified in the statement. Otherwise, an error message will be displayed. Multiple entries can be added to the list; use permit for one entry and use deny for the other entry. Different permit and deny commands can match different fields available for setting. The priority can be directly updated by specifying the command with the value for all other parameters except time-range & priority. All the configurable arguments (time-range and priority are excluded) can be used to differentiate one from another. These arguments are called differentiating arguments. To remove an entry, using the no form of this command, specify the entry with same value of all differentiating arguments specified (includes all optional parameters but time-range and priority are excluded). The time-range option in no form of this command means to remove the time-range association from this entry. To update the time-range or priority, specify the entry with the same value of all differentiating arguments, which are configured, and the update value for timerange or priority. The priority value must be unique in the domain of an access-list. If r a priority value is entered that is already present, an error message will be shown. When the time-range is not specified, the statement will be always effective. This example shows how to configure access entries in the profile daily-profile to allow two sets of source MAC addresses. Others are denied due to default implicit deny rule. Switch(config)# mac access-list extended daily-profile Switch(config-mac-ext-acl)# permit 00:80:33:00:00:00 ff:ff:ff:00:00:00 any Switch(config-mac-ext-acl)#permit 00:f4:57:00:00:00 ff:ff:ff:00:00:00 any Switch(config-mac-ext-acl)# exit Switch(config)# Verify the settings by entering the show show access-list command. CLI Reference Guide 464