Dell PowerConnect M6220 Command Line Interface Guide - Page 165

Command Mode Global Configuration mode User Guidelines Users are permitted to add rules, but if a packet does not match any user-specified rules, the packet is dropped by the implicit "deny all" rule. Examples The following examples create an ACL to discard any HTTP traffic from 192.168.77.171, but allow all other traffic from 192.168.77.171: console(config)#access-list alpha deny 192.168.77.171 0.0.0.0 0.0.0.0 255.255.255.255 eq http console(config)#access-list alpha permit 192.168.77.171 0.0.0.0 deny | permit Use the deny command in Mac-Access-List Configuration mode to deny traffic if the conditions defined in the deny statement are matched. Use the permit command in MacAccess-List Configuration mode to allow traffic if the conditions defined in the permit statement are matched. Syntax {deny | permit} {srcmac srcmacmask | any} {dstmac dstmacmask | any | bpdu } [{ethertypekey | 0x0600-0xFFFF }] [ vlan eq 0-4095 ] [cos 0-7] [secondary-vlan eq 0-4095 ] [secondary-cos 0-7] [log] [ assign-queue queue-id ] [{mirror |redirect} interface ] • srcmac - Valid source MAC address in format xxxx.xxxx.xxxx. • srcmacmask - Valid MAC address bitmask for the source MAC address in format xxxx.xxxx.xxxx. • any - Packets sent to or received from any MAC address • dstmac - Valid destination MAC address in format xxxx.xxxx.xxxx. • destmacmask - Valid MAC address bitmask for the destination MAC address in format xxxx.xxxx.xxxx. • bpdu - Bridge protocol data unit • ethertypekey - Either a keyword or valid four-digit hexadecimal number. (Range: Supported values are appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, Netbios, novell, pppoe, rarp.) • 0x0600-0xFFFF - Specify custom ethertype value (hexadecimal range 0x0600-0xFFFF) • vlan eq - VLAN number. (Range 0-4095) 165