Dell PowerEdge M520 Dell PowerConnect M6220/M6348/M8024 Switches Configuration - Page 112

Example #7: Setup an ACL with Permit Action, Example #8: Show MAC Access Lists

Page 112 highlights

Example #7: Setup an ACL with Permit Action console# Config console(config)#mac access-list extended mac2 console(config-mac-access-list)#permit ? any Configure a match condition for all the source MAC addresses in the Source MAC Address field. Enter a MAC Address. console(config-mac-access-list)#permit any ? any bpdu Configure a match condition for all the destination MAC addresses in the Destination MAC Address field. Match on any BPDU destination MAC Address. Enter a MAC Address. console(config-mac-access-list)#permit any any ? assign-queue cos log mirror redirect vlan Configure the Queue Id assignment attribute. Configure a match condition based on a COS value. Configure logging for this access list rule. Configure the packet mirroring attribute. Configure the packet redirection attribute. Configure a match condition based on a VLAN ID. Enter a four-digit hexadecimal number in the range of 0x0600 to 0xffff to specify a custom Ethertype value. Press enter to execute the command. Enter one of the following keywords to specify an Ethertype (appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp). console(config-mac-access-list)#permit any any Example #8: Show MAC Access Lists console#show mac access-lists Current number of all ACLs: 3 Maximum number of all ACLs: 100 MAC ACL Name Rules Interface(s) Direction mac1 1 1/g5 Inbound mac2 1 console#show mac access-lists mac1 112 Device Security

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158

112
Device Security
Example #7: Setup an ACL with Permit Action
console# Config
console(config)#mac access-list extended mac2
console(config-mac-access-list)#permit ?
any
Configure a match condition for all the source MAC
addresses in the Source MAC Address field.
<srcmac>
Enter a MAC Address.
console(config-mac-access-list)#permit any ?
any
Configure a match condition for all the destination
MAC addresses in the Destination MAC Address field.
bpdu
Match on any BPDU destination MAC Address.
<dstmac>
Enter a MAC Address.
console(config-mac-access-list)#permit any any ?
assign-queue
Configure the Queue Id assignment attribute.
cos
Configure a match condition based on a COS value.
log
Configure logging for this access list rule.
mirror
Configure the packet mirroring attribute.
redirect
Configure the packet redirection attribute.
vlan
Configure a match condition based on a VLAN ID.
<0x0600-0xffff>
Enter a four-digit hexadecimal number in the range of
0x0600 to 0xffff to specify a custom Ethertype value.
<cr>
Press enter to execute the command.
<ethertypekey>
Enter one of the following keywords to specify an
Ethertype (appletalk, arp, ibmsna, ipv4, ipv6, ipx,
mplsmcast, mplsucast, netbios, novell, pppoe, rarp).
console(config-mac-access-list)#permit any any
Example #8: Show MAC Access Lists
console#show mac access-lists
Current number of all ACLs: 3
Maximum number of all ACLs: 100
MAC ACL Name
Rules
Interface(s)
Direction
------------------------------- ----- ------------------------- ---------
mac1
1
1/g5
Inbound
mac2
1
console#show mac access-lists mac1