Netgear XSM4324FS CLI Manual Software Version 12.x - Page 958

M4300 Intelligent Edge Series Fully Managed Stackable Switches Parameter Description name The name of the access control list. id The ID of the access control list. starting-sequence- The sequence number from which to start the renumbering. The range is 1-2147483647. The number default is 10. increment The value with which the sequence numbers must be incremented. The range is 1-2147483647. The default is 10. [sequence-number] {deny | permit} (MAC ACL) This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source (srcmac) and destination (dstmac) MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on any value in that field. The remaining command parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the command format. Format Mode [sequence-number] {deny | permit} {srcmac | any} {dstmac | any} [ethertypekey | 0x0600-0xFFFF] [vlan {eq 0-4095}] [cos 0-7] [[log] [time-range time-range-name] [assign-queue queue-id]] [{mirror | redirect} unit/slot/port] [rate-limit rate burst-size] Mac-Access-List Config Note: An implicit deny all MAC rule always terminates the access list. The sequence number specifies the sequence number for the ACL rule. Either you define the sequence number or is it is generated. If no sequence number exists for a rule, a sequence number that is 10 greater than the last sequence number in the ACL is used and the rule is placed at the end of the list. If this is the first ACL rule in the ACL, a sequence number of 10 is assigned. If the calculated sequence number exceeds the maximum sequence number value, the creation of the ACL rule fails. You cannot create a rule that duplicates an already existing one and you cannot configure a rule with a sequence number that is already used for another rule. For example, if you add new ACL rule to the ACL without specifying a sequence number, the rule is placed at the bottom of the list. By changing the sequence number, you can move the ACL rule to a different position in the ACL. You can specify the Ethertype as either a keyword or a four-digit hexadecimal value from 0x0600-0xFFFF. The currently supported ethertypekey values are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, and rarp. Each of these translates into its equivalent Ethertype value(s). Quality of Service Commands 958 CLI Command Reference Manual