D-Link DGS-6600-48T Cli Reference Manual page 474

DGS-6604 m
Command Mode
Usage Guideline
Example
Switch(config)# mac access-list extended daily-profile
Switch(config-mac-ext-acl)# permit 00:80:33:00:00:00 ff:ff:ff:00:00:00 any
Switch(config-mac-ext-acl)#permit
Switch(config-mac-ext-acl)# exit
Switch(config)#
CLI Reference Guide
MAC access-list extended configuration
The time-range profile must be created before it can be specified in the
statement. Otherwise, an error message will be displayed.
Multiple entries can be added to the list; use permit for one entry and use deny
for the other entry.
Different permit and deny commands can match different fields available for
setting.
The priority can be directly updated by specifying the command with the value for
all other parameters except time-range & priority.
All the configurable arguments (time-range and priority are excluded) can be
used to differentiate one from another. These arguments are called differentiating
arguments. To remove an entry, using the no form of this command, specify the
entry with same value of all differentiating arguments specified (includes all
optional parameters but time-range and priority are excluded). The time-range
option in no form of this command means to remove the time-range association
from this entry.
To update the time-range or priority, specify the entry with the same value of all
differentiating arguments, which are configured, and the update value for time-
range or priority.
The priority value must be unique in the domain of an access-list. If r a priority
value is entered that is already present, an error message will be shown.
When the time-range is not specified, the statement will be always effective.
This example shows how to configure access entries in the profile daily-profile to
allow two sets of source MAC addresses. Others are denied due to default
implicit deny rule.
Verify the settings by entering the show show access-list command.
00:f4:57:00:00:00 ff:ff:ff:00:00:00 any
permit | deny (mac access-list)
464