Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

permit (MAC access-list configuration)Chapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS CommandsUsage GuidelinesYou enter MAC access-list configuration mode by using the mac access-list extended globalconfiguration command.If you use the host keyword, you cannot enter an address mask; if you do not use the any or hostkeywords, you must enter an address mask.After an access control entry (ACE) is added to an access control list, an implied deny-any-anycondition exists at the end of the list. That is, if there are no matches, the packets are denied. However,before the first ACE is added, the list permits all packets.For more information about MAC-named extended access lists, see the software configuration guide forthis release.ExamplesThis example shows how to define the MAC-named extended access list to allow NETBIOS traffic fromany source to MAC address 00c0.00a0.03fa. Traffic matching this list is allowed.Switch(config-ext-macl)# permit any host 00c0.00a0.03fa netbiosThis example shows how to remove the permit condition from the MAC-named extended access list:Switch(config-ext-macl)# no permit any 00c0.00a0.03fa 0000.0000.0000 netbiosThis example permits all packets with Ethertype 0x4321:Switch(config-ext-macl)# permit any any 0x4321 0You can verify your settings by entering the show access-lists privileged EXEC command.Related Commands Command Descriptiondeny (MAC access-list Denies non-IP traffic to be forwarded if conditions are matched.configuration)mac access-list extended Creates an access list based on MAC addresses for non-IP traffic.show access-listsDisplays access control lists configured on a switch.2-426Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08