Dell PowerEdge M520 Dell PowerConnect M6220/M6348/M8024 Switches Configuration - Page 110

MAC ACL CLI Examples, Example #3: Apply the Rule to Outbound Egress Traffic on Port 1/g2

Get Dell PowerEdge M520 PDF manuals and user guides View all Dell PowerEdge M520 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 110 highlights

Example #2: Define the Second Rule for ACL 179 Define the rule to set similar conditions for UDP traffic as for TCP traffic. console(config)#access-list list1 permit udp 192.168.77.0 0.0.0.255 192.168.77.3 0.0.0.255 console(config)#exit Example #3: Apply the Rule to Outbound (Egress) Traffic on Port 1/g2 Only traffic matching the criteria will be accepted. console(config)#interface ethernet 1/g2 console(config-if-1/g2)#ip access-group list1 out console(config-if-1/g2)#exit MAC ACL CLI Examples The following are examples of the commands used for the MAC ACLs feature. Example #4: Set up a MAC Access List console#config console(config)#mac access-list extended mac1 console(config)#exit Example #5: Specify MAC ACL Attributes console(config-mac-access-list)#deny ? any Configure a match condition for all the source MAC addresses in the Source MAC Address field. Enter a MAC Address. console(config-mac-access-list)#deny any ? any bpdu Configure a match condition for all the destination MAC addresses in the Destination MAC Address field. Match on any BPDU destination MAC Address. Enter a MAC Address. console(config-mac-access-list)#deny any 00:11:22:33:44:55 ? Enter a MAC Address bit mask. console(config-mac-access-list)#deny any 00:11:22:33:44:55 00:00:00:00:FF:FF ? assign-queue cos Configure the Queue Id assignment attribute. Configure a match condition based on a COS value. 110 Device Security

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
110
Device Security
Example #2: Define the Second Rule for ACL 179
Define the rule to set similar conditions for UDP traffic as for TCP traffic.
console(config)#access-list list1 permit udp 192.168.77.0 0.0.0.255 192.168.77.3 0.0.0.255
console(config)#exit
Example #3: Apply the Rule to Outbound (Egress) Traffic on Port 1/g2
Only traffic matching the criteria will be accepted.
console(config)#interface ethernet 1/g2
console(config-if-1/g2)#ip access-group list1 out
console(config-if-1/g2)#exit
MAC ACL CLI Examples
The following are examples of the commands used for the MAC ACLs feature.
Example #4: Set up a MAC Access List
console#config
console(config)#mac access-list extended mac1
console(config)#exit
Example #5: Specify MAC ACL Attributes
console(config-mac-access-list)#deny ?
any
Configure a match condition for all the source MAC
addresses in the Source MAC Address field.
<srcmac>
Enter a MAC Address.
console(config-mac-access-list)#deny any ?
any
Configure a match condition for all the destination
MAC addresses in the Destination MAC Address field.
bpdu
Match on any BPDU destination MAC Address.
<dstmac>
Enter a MAC Address.
console(config-mac-access-list)#deny any 00:11:22:33:44:55 ?
<dstmacmask>
Enter a MAC Address bit mask.
console(config-mac-access-list)#deny any 00:11:22:33:44:55 00:00:00:00:FF:FF ?
assign-queue
Configure the Queue Id assignment attribute.
cos
Configure a match condition based on a COS value.