Home » Netgear Manuals » Hubs & Switches » Netgear GSM7212P » Manual Viewer

Netgear GSM7212P GSM5212P/GSM7212P/GSM7212F/GSM7224P CLI Manual - Page 471

mac access-list extended rename, deny | permit} MAC ACL

Add to My Manuals
Save this manual to your list of manuals

Page 471 highlights

ProSafe Managed Switch mac access-list extended rename This command changes the name of a MAC Access Control List (ACL). The parameter is the name of an existing MAC ACL. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC access list. This command fails if a MAC ACL by the name already exists. Format Mode mac access-list extended rename Global Config {deny | permit} (MAC ACL) This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. Note: The 'no' form of this command is not supported, since the rules within a MAC ACL cannot be deleted individually. Rather, the entire MAC ACL must be deleted and re-specified. Note: An implicit 'deny all' MAC rule always terminates the access list. A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on any value in that field. The remaining command parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the command format. The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from 0x0600-0xFFFF. The currently supported values are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp. Each of these translates into its equivalent Ethertype value(s). The time-range parameter allows imposing time limitation on the MAC ACL rule asdefined by the parameter . If a time range with the specified namedoes not exist and the MAC ACL containing this ACL rule is applied to an interface orbound to a VLAN, then the ACL rule is applied immediately. If a time range withspecified name exists and the MAC ACL containing this ACL rule is applied to aninterface or bound to a VLAN, then Quality of Service (QoS) Commands 471

Section	Page
ProSafe Managed Switch	1
Contents	3
1. Using the Command-Line Interface	8
Licensing and Command Support	8
Command Syntax	10
Command Conventions	11
Common Parameter Values	11
Unit/Slot/Port Naming Convention	12
Using a Command’s “No” Form	13
Managed Switch Modules	13
Command Modes	14
Command Completion and Abbreviation	17
CLI Error Messages	18
CLI Line-Editing Conventions	18
Using CLI Help	19
Accessing the CLI	20
2. Stacking Commands	21
Dedicated Port Stacking	21
Front Panel Stacking Commands	29
Non-Stop Forwarding Commands	30
Stack Firmware Synchronization Commands	34
3. Switching Commands	37
Port Configuration Commands	38
Loopback Interface Commands	44
Spanning Tree Protocol (STP) Commands	46
VLAN Commands	63
Double VLAN Commands	76
Voice VLAN Commands	79
Provisioning (IEEE 802.1p) Commands	81
Protected Ports Commands	81
Private Group Commands	84
GARP Commands	85
GVRP Commands	87
GMRP Commands	89
Port-Based Network Access Control Commands	91
802.1X Supplicant Commands	105
Storm-Control Commands	107
Port-Channel/LAG (802.3ad) Commands	118
Port Mirroring	134
Static MAC Filtering	136
DHCP L2 Relay Agent Commands	140
DHCP Client Commands	144
DHCP Snooping Configuration Commands	145
Dynamic ARP Inspection Commands	154
IGMP Snooping Configuration Commands	161
IGMP Snooping Querier Commands	169
MLD Snooping Commands	172
MLD Snooping Querier Commands	179
set mld querier	179
set mld querier query_interval	180
set mld querier timer expiry	180
set mld querier election participate	181
show mldsnooping querier	181
Port Security Commands	182
LLDP (802.1AB) Commands	186
LLDP-MED Commands	194
Denial of Service Commands	203
MAC Database Commands	213
ISDP Commands	215
Priority-Based Flow Control Commands	220
4. Multicast VLAN Registration (MVR)	223
About MVR	223
MVR Commands	223
5. Routing Commands	231
Address Resolution Protocol (ARP) Commands	232
IP Routing Commands	237
Router Discovery Protocol Commands	250
Virtual LAN Routing Commands	253
Virtual Router Redundancy Protocol Commands	254
DHCP and BOOTP Relay Commands	263
IP Helper Commands	265
Open Shortest Path First (OSPF) Commands	268
OSPF Graceful Restart Commands	305
nsf	306
nsf restart-interval	306
nsf helper	307
nsf helper disable	307
nsf [ietf] helper strict-lsa-checking	308
Routing Information Protocol (RIP) Commands	308
ICMP Throttling Commands	316
6. IP Multicast Commands	318
Multicast Commands	318
DVMRP Commands	324
PIM Commands	329
Internet Group Message Protocol (IGMP) Commands	340
IGMP Proxy Commands	347
7. IPv6 Commands	353
Tunnel Interface Commands	354
IPv6 Routing Commands	355
OSPFv3 Commands	376
OSPFv3 Graceful Restart Commands	407
DHCPv6 Commands	409
8. IPv6 Multicast Commands	417
IPv6 Multicast Forwarder Commands	418
IPv6 PIM Commands	420
IPv6 MLD Commands	428
IPv6 MLD-Proxy Commands	434
9. Quality of Service (QoS) Commands	440
Class of Service (CoS) Commands	440
Differentiated Services (DiffServ) Commands	448
DiffServ Class Commands	449
DiffServ Policy Commands	457
DiffServ Service Commands	463
DiffServ Show Commands	464
MAC Access Control List (ACL) Commands	470
IP Access Control List (ACL) Commands	474
IPv6 Access Control List (ACL) Commands	481
Time Range Commands for Time-Based ACLs	485
Auto-Voice over IP Commands	488
10. Power over Ethernet (PoE) Commands	490
About PoE	490
PoE Commands	491
11. Utility Commands	501
Auto Install Commands	502
Dual Image Commands	504
System Information and Statistics Commands	506
Logging Commands	516
Email Alerting and Mail Server Commands	520
System Utility and Clear Commands	527
Simple Network Time Protocol (SNTP) Commands	536
DHCP Server Commands	543
DNS Client Commands	555
Packet Capture Commands	560
Serviceability Packet Tracing Commands	561
Cable Test Command	579
sFlow Commands	579
Software License Commands	584
IP Address Conflict Commands	585
Link Local Protocol Filtering Commands	586
12. Management Commands	588
Configuring the Switch Management CPU	589
Network Interface Commands	591
Console Port Access Commands	594
Telnet Commands	596
Secure Shell (SSH) Commands	601
Management Security Commands	604
Hypertext Transfer Protocol (HTTP) Commands	605
Access Commands	612
User Account Commands	612
SNMP Commands	628
RADIUS Commands	639
TACACS+ Commands	651
Configuration Scripting Commands	655
Pre-login Banner and System Prompt Commands	657
Switch Database Management (SDM) Templates	658
IPv6 Management Commands	659
13. Log Messages	664
Core	665
Utilities	667
Management	669
Switching	673
QoS	679
Routing/IPv6 Routing	680
Multicast	683
Stacking	685
Technologies	686
O/S Support	688
14. Captive Portal Commands	690
Captive Portal Global Commands	690
Captive Portal Configuration Commands	694
Captive Portal Status Commands	700
Captive Portal Client Connection Commands	704
Captive Portal Interface Commands	708
Captive Portal Local User Commands	709
Captive Portal User Group Commands	715
15. Command List	716
{deny \| permit} (IP ACL) 477	716
{deny \| permit} (IPv6) 482	716
{deny \| permit} (MAC ACL) 471	716
1583compatibility 270	716
aaa authentication dot1x 626	716
aaa authentication enable 625	716
aaa authentication login 624	716
aaa ias-user username 627	716
Absolute 486	716
access-list 475	716
acl-trapflags 479	716
addport 118	716
area default-cost (OSPF) 270	716
area default-cost (OSPFv3) 380	716
area nssa (OSPF) 270	716
area nssa (OSPFv3) 380	716
area nssa default-info-originate (OSPF) 271	716
area nssa default-info-originate (OSPFv3) 381	716
area nssa no-redistribute (OSPF) 271	716
area nssa no-redistribute (OSPFv3) 381	716
area nssa no-summary (OSPF) 272	716
area nssa no-summary (OSPFv3) 382	716
area nssa translator-role (OSPF) 272	716
area nssa translator-role (OSPFv3) 382	716
area nssa translator-stab-intv (OSPF) 272	716
area nssa translator-stab-intv (OSPFv3) 382	716
area range (OSPF) 273	716
area range (OSPFv3) 383	716
area stub (OSPF) 273	716
area stub (OSPFv3) 383	716
area stub no-summary (OSPF) 274	716
area stub no-summary (OSPFv3) 384	716
area virtual-link (OSPF) 274	716
area virtual-link (OSPFv3) 384	716
area virtual-link authentication 274	716
area virtual-link dead-interval (OSPF) 275	716
area virtual-link dead-interval (OSPFv3) 384	716
area virtual-link hello-interval (OSPF) 275	716
area virtual-link hello-interval (OSPFv3) 385	716
area virtual-link retransmit-interval (OSPF) 276	717
area virtual-link retransmit-interval (OSPFv3) 385	717
area virtual-link transmit-delay (OSPF) 276	717
area virtual-link transmit-delay (OSPFv3) 386	717
arp 232	717
arp access-list 157	717
arp cachesize 233	717
arp dynamicrenew 233	717
arp purge 233	717
arp resptime 233	717
arp retries 234	717
arp timeout 234	717
assign-queue 458	717
authentication timeout 692	717
authorization network radius 639	717
auto-cost (OSPF) 277	717
auto-cost (OSPFv3) 386	717
auto-negotiate 39	717
auto-negotiate all 39	717
auto-summary 309	717
auto-voip 488	717
auto-voip all 488	717
bandwidth 277	717
block 700	717
boot auto-copy-sw 34	717
boot auto-copy-sw allow-downgrade 35	717
boot auto-copy-sw trap 35	717
boot autoinstall start 503	717
boot autoinstall stop 503	717
boot host auto-save 503	717
boot host dhcp 504	717
boot host retry-count 503	717
boot system 505	717
bootfile 547	717
bootpdhcprelay cidoptmode 263	717
bootpdhcprelay maxhopcount 263	717
bootpdhcprelay minwaittime 264	717
bridge aging-time 213	717
cablestatus 579	717
capability opaque 278	717
captive-portal client deauthenticate 708	717
captive-portal 690	717
capture all packets 560	717
capture receive packet 560	717
capture transmit packet 560	717
capture wrap 561	717
class 459	717
class-map 449	717
class-map rename 450	717
classofservice dot1p-mapping 441	717
classofservice ip-dscp-mapping 441	717
classofservice trust 442	717
clear aaa ias-users 628	718
clear arp-cache 235	718
clear arp-switch 235	718
clear captive-portal users 715	718
clear checkpoint statistics 33	718
clear config 529	718
clear counters 529	718
clear dot1x authentication-history 98	718
clear dot1x statistics 92	718
clear host 558	718
clear igmpsnooping 529	718
clear ip address-conflict-detect 586	718
clear ip arp inspection statistics 159	718
clear ip dhcp binding 552	718
clear ip dhcp conflict 552	718
clear ip dhcp server statistics 552	718
clear ip dhcp snooping binding 152	718
clear ip dhcp snooping statistics 152	718
clear ip helper statistics 265	718
clear ip ospf 278	718
clear ip ospf configuration 278	718
clear ip ospf counters 278	718
clear ip ospf neighbor 279	718
clear ip ospf neighbor interface 279	718
clear ip ospf redistribution 279	718
clear ip ospf stub-router 279	718
clear ip route all 244	718
clear ipv6 dhcp 414	718
clear ipv6 neighbors 368	718
clear ipv6 ospf 387	718
clear ipv6 ospf configuration 387	718
clear ipv6 ospf counters 387	718
clear ipv6 ospf neighbor 387	718
clear ipv6 ospf neighbor interface 388	718
clear ipv6 ospf redistribution 388	718
clear ipv6 statistics 375	718
clear isdp counters 217	718
clear isdp table 217	718
clear lldp remote-data 189	718
clear lldp statistics 189	718
clear logging buffered 529	718
clear logging email statistics 525	718
clear mac-addr-table 529	718
clear network ipv6 dhcp statistics 663	718
clear pass 530	718
clear port-channel 530	718
clear radius statistics 92	718
clear traplog 530	718
clear vlan 530	718
client-identifier 544	718
client-name 544	718
clock summer-time date 540	718
clock summer-time recurring 539	719
clock timezone 539	719
configuration 594	719
configuration (Captive Portal) 694	719
conform-color 459	719
copy 534	719
copy (pre-login banner) 657	719
cos-queue min-bandwidth 442	719
cos-queue random-detect 443	719
cos-queue strict 443	719
crypto certificate generate 604	719
crypto key generate dsa 605	719
crypto key generate rsa 604	719
datacenter-bridging priority-flow-control mode on 221	719
datacenter-bridging priority-flow-control priority 221	719
debug arp 561	719
debug auto-voip 562	719
debug clear 562	719
debug console 562	719
debug dhcp packet 563	719
debug dot1x packet 563	719
debug igmpsnooping packet 564	719
debug igmpsnooping packet receive 565	719
debug igmpsnooping packet transmit 564	719
debug ip acl 566	719
debug ip dvmrp packet 566	719
debug ip igmp packet 567	719
debug ip mcache packet 567	719
debug ip pimdm packet 568	719
debug ip pimsm packet 568	719
debug ip vrrp 568	719
debug ipv6 dhcp 569	719
debug ipv6 mcache packet 569	719
debug ipv6 mld packet 570	719
debug ipv6 ospfv3 packet 574	719
debug ipv6 pimdm packet 570	719
debug ipv6 pimsm packet 570	719
debug isdp packet 220	719
debug lacp packet 571	719
debug mldsnooping packet 571	719
debug ospf packet 572	719
debug ping packet 574	719
debug rip packet 575	719
debug sflow packet 576	719
debug spanning-tree bpdu 577	719
debug spanning-tree bpdu receive 577	719
debug spanning-tree bpdu transmit 578	719
default-information originate (OSPF) 279	719
default-information originate (OSPFv3) 388	719
default-information originate (RIP) 310	719
default-metric (OSPF) 280	719
default-metric (OSPFv3) 388	719
default-metric (RIP) 310	720
default-router 545	720
delete 504	720
deleteport (Global Config) 119	720
deleteport (Interface Config) 119	720
description 40	720
dhcp client vendor-id-option 144	720
dhcp client vendor-id-option-string 144	720
dhcp l2relay 140	720
dhcp l2relay circuit-id vlan 140	720
dhcp l2relay remote-id vlan 141	720
dhcp l2relay trust 142	720
dhcp l2relay vlan 141	720
diffserv 449	720
disconnect 612	720
distance ospf (OSPF) 280	720
distance ospf (OSPFv3) 389	720
distance rip 310	720
distribute-list out (OSPF) 281	720
distribute-list out (RIP) 311	720
dns-server 545	720
dns-server (IPv6) 411	720
domain-name 547	720
domain-name (IPv6) 411	720
dos-control all 204	720
dos-control firstfrag 205	720
dos-control icmp 207	720
dos-control icmpfrag 212	720
dos-control icmpv4 211	720
dos-control icmpv6 211	720
dos-control l4port 206	720
dos-control sipdip 205	720
dos-control smacdmac 207	720
dos-control tcpfinurgpsh 210	720
dos-control tcpflag 206	720
dos-control tcpflagseq 209	720
dos-control tcpfrag 206	720
dos-control tcpoffset 209	720
dos-control tcpport 208	720
dos-control tcpsyn 210	720
dos-control tcpsynfin 210	720
dos-control udpport 208	720
dot1x dynamic-vlan enable 98	720
dot1x guest-vlan 92	720
dot1x initialize 92	720
dot1x mac-auth-bypass 92	720
dot1x max-req 93	720
dot1x max-users 93	720
dot1x pae 105	720
dot1x port-control 94	720
dot1x port-control all 94	720
dot1x re-authenticate 95	720
dot1x re-authentication 95	721
dot1x supplicant max-start 106	721
dot1x supplicant port-control 105	721
dot1x supplicant timeout auth-period 107	721
dot1x supplicant timeout held-period 106	721
dot1x supplicant timeout start-period 106	721
dot1x supplicant user 107	721
dot1x system-auth-control 95	721
dot1x system-auth-control monitor 98	721
dot1x timeout 96	721
dot1x unauthenticated-vlan 97	721
dot1x user 97	721
drop 458	721
dvlan-tunnel ethertype 77	721
enable (OSPF) 269	721
enable (OSPFv3) 389	721
enable (Privileged EXEC access) 591	721
enable (RIP) 309	721
enable authentication 596	721
enable password 530	721
enable 691	721
enable (Instance) 694	721
encapsulation 243	721
exit-overflow-interval (OSPF) 281	721
exit-overflow-interval (OSPFv3) 390	721
external-lsdb-limit (OSPF) 281	721
external-lsdb-limit (OSPFv3) 390	721
ezconfig 589	721
filedescr 505	721
group 695	721
hardware-address 545	721
host 546	721
hostroutesaccept 312	721
http port 691	721
https port 691	721
idle-timeout 699	721
initiate failover 32	721
interface 38	721
interface lag 39	721
interface loopback 44	721
interface range 38	721
interface tunnel 354	721
interface vlan 38	721
interface (Captive Portal) 700	721
ip access-group 478	721
ip access-list 476	721
ip access-list rename 477	721
ip address 238	721
ip address dhcp 238	721
ip address-conflict-detect run 585	721
ip arp inspection filter 156	721
ip arp inspection limit 156	721
ip arp inspection trust 155	722
ip arp inspection validate 155	722
ip arp inspection vlan 154	722
ip arp inspection vlan logging 155	722
ip default-gateway 239	722
ip dhcp bootp automatic 551	722
ip dhcp conflict logging 551	722
ip dhcp excluded-address 550	722
ip dhcp ping packets 550	722
ip dhcp pool 543	722
ip dhcp snooping 145	722
ip dhcp snooping binding 147	722
ip dhcp snooping database 146	722
ip dhcp snooping database write-delay 146	722
ip dhcp snooping limit 147	722
ip dhcp snooping log-invalid 148	722
ip dhcp snooping trust 148	722
ip dhcp snooping verify mac-address 146	722
ip dhcp snooping vlan 145	722
ip domain list 556	722
ip domain lookup 555	722
ip domain name 556	722
ip domain retry 558	722
ip domain timeout 558	722
ip dvmrp 325	722
ip dvmrp metric 324	722
ip dvmrp trapflags 325	722
ip dvmrp(Global Config) 324	722
ip helper enable 266	722
ip helper-address 266	722
ip helper-address (Global Config) 265	722
ip helper-address discard 267	722
ip host 557	722
ip http authentication 607	722
ip http java 606	722

Match case Limit results 1 per page

Quality of Service (QoS) Commands

471

ProSafe Managed Switch

mac access-list extended rename

This command changes the name of a MAC Access Control List (ACL). The

<name>

parameter is the name of an existing MAC ACL. The

parameter is a

case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC

access list.

This command fails if a MAC ACL by the name

already exists.

Format

mac access-list extended rename

Mode

{deny | permit} (MAC ACL)

This command creates a new rule for the current MAC access list. Each rule is appended to

the list of configured rules for the list.

Note:

The 'no' form of this command is not supported, since the rules

within a MAC ACL cannot be deleted individually. Rather, the entire

MAC ACL must be deleted and re-specified.

Note:

An implicit 'deny all' MAC rule always terminates the access list.

A rule may either deny or permit traffic according to the specified classification fields. At a

minimum, the source and destination MAC value must be specified, each of which may be

substituted using the keyword any to indicate a match on any value in that field. The

remaining command parameters are all optional, but the most frequently used parameters

appear in the same relative order as shown in the command format.

The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from

0x0600-0xFFFF. The currently supported

values are: appletalk, arp,

ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp. Each of these

translates into its equivalent Ethertype value(s).

The time-range parameter allows imposing time limitation on the MAC ACL rule

defined by the parameter <time-range-name>. If a time range with the specified namedoes

not exist and the MAC ACL containing this ACL rule is applied to an interface orbound to a

VLAN, then the ACL rule is applied immediately. If a time range withspecified name exists

and the MAC ACL containing this ACL rule is applied to aninterface or bound to a VLAN, then

Global Config