D-Link DGS-6608 — настройка MAC доступа с помощью расширенных списков [560/1106]

Превью страниц Страница 560 / 1106

DGS-6600 Series Switch m permit | deny (mac access-list)

CLI Reference Guide

550

Command Mode MAC extended access list configuration.

Usage Guideline The time-range profile must be created before it can be specified in the

statement. Otherwise, an error message will be displayed.

Multiple entries can be added to the list, for example, use permit for one entry

and use deny for the other entry.

Different permit and deny commands can match different fields available for

setting.

The priority can be directly updated by specifying the command with the value for

all other parameters except time-range and priority.

All the configurable arguments (time-range and priority are excluded) can be

used to differentiate one from another. These arguments are called differentiating

arguments. To remove an entry, using the no form of this command, specify the

entry with same value of all differentiating arguments specified (includes all

optional parameters but time-range and priority are excluded). The time-range

option in no form of this command means to remove the time-range association

from this entry.

To update the time-range or priority, specify the entry with the same value of all

differentiating arguments, which are configured, and the update value for time-

range or priority.

The priority value must be unique in the domain of an access list. If a priority

value is entered that is already present, an error message will be shown.

When the time-range is not specified, the statement will be always effective.

Example This example shows how to configure access entries in the profile daily-profile to

allow two sets of source MAC addresses. Others are denied due to default

implicit deny rule.

Verify the settings by entering the show access-list command.

Switch(config)#mac access-list extended daily-profile

The maximum available of MAC access-list is 6

Switch(config-mac-ext-acl)#permit 00:80:33:00:00:00 ff:ff:ff:00:00:00 any

Switch(config-mac-ext-acl)#permit 00:f4:57:00:00:00 ff:ff:ff:00:00:00 any