Table of Contents
Advertisement
D-Link Unified Switch CLI Command Reference
This command fails if a MAC ACL by the name <newname> already exists.
Format
mac access-list extended rename <name> <newname>
Mode
Global Config
{deny | permit} (MAC ACL)
This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for
the list.
Note: The 'no' form of this command is not supported, since the rules within a MAC ACL cannot be deleted
individually. Rather, the entire MAC ACL must be deleted and re-specified.
Note: An implicit 'deny all' MAC rule always terminates the access list.
Note: The assign-queue and mirror attributes are configurable for a deny rule, but they have no operational effect.
A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and
destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on
any value in that field. The remaining command parameters are all optional, but the most frequently used parameters appear
in the same relative order as shown in the command format.
The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from 0x0600-0xFFFF. The currently
supported <ethertypekey> values are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell,
pppoe, rarp. Each of these translates into its equivalent Ethertype value(s).
Ethertype Keyword
appletalk
arp
ibmsna
ipv4
ipv6
ipx
mplsmcast
mplsucast
netbios
novell
pppoe
rarp
The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields, respectively, of the VLAN tag. For
packets containing a double VLAN tag, this is the first (or outer) tag.
© 2009 D-Link Corporation. All Rights Reserved
398
Table 9: Ethertype Keyword and 4-digit Hexadecimal Value
Corresponding Value
0x809B
0x0806
0x80D5
0x0800
0x86DD
0x8037
0x8848
0x8847
0x8191
0x8137, 0x8138
0x8863, 0x8864
0x8035
Advertisement
Table of Contents
