Cisco Cisco 5760 Wireless LAN Controller Referências técnicas
deny (MAC access-list configuration)
To prevent non-IP traffic from being forwarded if the conditions are matched, use the deny MAC access-list
configuration command on the switch stack or on a standalone switch. To remove a deny condition from the
named MAC access list, use the no form of this command.
configuration command on the switch stack or on a standalone switch. To remove a deny condition from the
named MAC access list, use the no form of this command.
deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
no deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
Syntax Description
Denies any source or destination MAC address.
any
Defines a host MAC address and optional subnet mask. If the
source address for a packet matches the defined address,
non-IP traffic from that address is denied.
source address for a packet matches the defined address,
non-IP traffic from that address is denied.
host src-MAC-addr | src-MAC-addr mask
Defines a destination MAC address and optional subnet mask.
If the destination address for a packet matches the defined
address, non-IP traffic to that address is denied.
If the destination address for a packet matches the defined
address, non-IP traffic to that address is denied.
host dst-MAC-addr | dst-MAC-addr mask
(Optional) Specifies the Ethertype number of a packet with
Ethernet II or SNAP encapsulation to identify the protocol
of the packet.
Ethernet II or SNAP encapsulation to identify the protocol
of the packet.
The type is 0 to 65535, specified in hexadecimal.
The mask is a mask of don’t care bits applied to the Ethertype
before testing for a match.
before testing for a match.
type mask
(Optional) Specifies Ethertype AppleTalk Address Resolution
Protocol that maps a data-link address to a network address.
Protocol that maps a data-link address to a network address.
aarp
(Optional) Specifies EtherType DEC-Amber.
amber
(Optional) Specifies EtherType AppleTalk/EtherTalk.
appletalk
(Optional) Specifies EtherType Digital Equipment
Corporation (DEC) spanning tree.
Corporation (DEC) spanning tree.
dec-spanning
(Optional) Specifies EtherType DECnet Phase IV protocol.
decnet-iv
(Optional) Specifies EtherType DEC-Diagnostic.
diagnostic
(Optional) Specifies EtherType DEC-DSM.
dsm
Consolidated Platform Command Reference, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
OL-29471-01
371
deny (MAC access-list configuration)