Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 304

[sequence-number] {deny | permit} {{any | srcmac srcmacmask} {any | bpdu |dstmac dstmacmask}} [ethertypekey | [0x0600-0xFFFF] [vlan {eq 04095}] [secondary-vlan {eq 0-4095}] [cos 0-7] [log] [time-range time-rangename] [assign-queue queue-id] [{mirror | redirect} interface-id] [rate-limit rate burst-size] no sequence-number • sequence-number-Identifies the order of application of the permit/deny statement. If no sequence number is assigned, permit/deny statements are assigned a sequence number beginning at 1000 and incrementing by 10. Statements are applied in hardware beginning with the lowest sequence number. Sequence numbers only have applicability within an access group, i.e. the ordering applies within the access-group scope. The range for sequence numbers is 1- 2147483647. • srcmac-Valid source MAC address in format xxxx.xxxx.xxxx. • srcmacmask-Valid MAC address bit mask for the source MAC address. • any-Packets sent to or received from any MAC address. • dstmac-Valid destination MAC address. • destmacmask-Valid MAC address bit mask for the destination MAC address. • bpdu-Bridge protocol data unit • ethertypekey-Either a keyword or valid four-digit hexadecimal number. (Range: Supported values are appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, Netbios, novell, pppoe, rarp.) • 0x0600-0xFFFF-Specify custom EtherType value (hexadecimal range 0x0600-0xFFFF). • vlan eq-VLAN identifier. (Range 0-4095). This matches the outer VLAN of a single or double-tagged packet. It does not match untagged packets. • secondary-vlan eq-VLAN identifier. (Range 0-4095). This matches the inner VLAN of a double-tagged packet. It does not match single or untagged packets. • cos-Class of service. (Range 0-7) • log-Specifies that this rule is to be logged if the permit/deny rule has been matched one or more times since the expiry of the last logging interval. The logging interval is 5 minutes. Layer 2 Switching Commands 304