Технические ссылки для Cisco Cisco 5760 Wireless LAN Controller
permit (MAC access-list configuration)
To allow non-IP traffic to be forwarded if the conditions are matched, use the permit MAC access-list
configuration command on the switch stack or on a standalone switch. To remove a permit condition from
the extended MAC access list, use the no form of this command.
configuration command on the switch stack or on a standalone switch. To remove a permit condition from
the extended MAC access list, use the no form of this command.
{permit {any | hostsrc-MAC-addr | src-MAC-addr mask} {any | hostdst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsaplsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsaplsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
nopermit {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
Syntax Description
Denies any source or destination MAC address.
any
Specifies a host MAC address and optional subnet mask. If the
source address for a packet matches the defined address, non-IP
traffic from that address is denied.
source address for a packet matches the defined address, non-IP
traffic from that address is denied.
host src-MAC-addr | src-MAC-addr
mask
mask
Specifies a destination MAC address and optional subnet mask. If
the destination address for a packet matches the defined address,
non-IP traffic to that address is denied.
the destination address for a packet matches the defined address,
non-IP traffic to that address is denied.
host dst-MAC-addr | dst-MAC-addr
mask
mask
(Optional) Specifies the Ethertype number of a packet with Ethernet
II or SNAP encapsulation to identify the protocol of the packet.
II or SNAP encapsulation to identify the protocol of the packet.
• type is 0 to 65535, specified in hexadecimal.
• mask is a mask of don’t care bits applied to the Ethertype
before testing for a match.
type mask
(Optional) Specifies Ethertype AppleTalk Address Resolution
Protocol that maps a data-link address to a network address.
Protocol that maps a data-link address to a network address.
aarp
(Optional) Specifies EtherType DEC-Amber.
amber
(Optional) Specifies EtherType AppleTalk/EtherTalk.
appletalk
(Optional) Specifies EtherType Digital Equipment Corporation
(DEC) spanning tree.
(DEC) spanning tree.
dec-spanning
(Optional) Specifies EtherType DECnet Phase IV protocol.
decnet-iv
(Optional) Specifies EtherType DEC-Diagnostic.
diagnostic
(Optional) Specifies EtherType DEC-DSM.
dsm
Consolidated Platform Command Reference, Cisco IOS XE Release 3SE (Cisco WLC 5700 Series)
OL-29471-01
409
permit (MAC access-list configuration)