HP Mellanox SX1018 Mellanox MLNX-OS®Command Reference Guide for SX101 - Page 391

Rev 1.6.9 deny/permit (MAC ACL rule) [seq-number ] {deny|permit } {any | [mask ]} {any | [mask ]} [protocol ] [cos ] [vlan ] [action ] no Creates a rule for MAC ACL. The no form of the command deletes a rule from the MAC ACL. Syntax Description sequence-number Optional parameter to set a specific sequence number for the rule. The range is:1-500. deny | permit Determines the type of the rule, denies or permits action. {any | [mask ]} Sets source MAC and optionally sets a mask for that MAC. The "any" option will cause the rule not to check the source MAC. {any | [mask ]} Sets destination MAC and optionally sets a mask for that MAC. The "any" option will cause the rule not to check the destination MAC. protocol Sets the Ethertype filed value from the MAC address. Possible range is: 0x0000-0xffff. cos-value Sets the COS (priority bits) field, possible range is: 0-7. vlan-id Sets the VLAN ID field, possible range is 0-4095. Default No rule is added by default to access control list. Default sequence number is in multiple of 10. Configuration Mode Config MAC ACL History 3.1.1400 Role admin Example switch (config mac access-list my-list) # seq-number 10 deny 0a:0a:0a:0a:0a:0a mask ff:ff:ff:ff:ff:ff any vlan 6 cos 2 protocol 80 switch (config mac access-list my-list) # Related Commands ipv4/mac access-list ipv4/mac port access-group Note Mellanox Technologies 391 Mellanox® Technologies Confidential