110
Switch(config-ext-macl)#permit host 0012.7711.2233
MACADDR Destination MAC address xxxx.xxxx.xxxx
any any destination MAC address
host A single destination host
Switch(config-ext-macl)#permit host 0012.7711.2233 host
MACADDR Destination MAC address xxxx.xxxx.xxxx
Switch(config-ext-macl)#permit host 0012.7711.2233 host
0011.7711.2234
[IFNAME] Egress interface name
Switch(config-ext-macl)#permit host 0012.7711.2233 host
0011.7711.2234 gi25
Note: MAC Rule: Permit/Deny wildcard Source_MAC wildcard
Dest_MAC Egress_Interface
Example 1: Edit IP
Extended access list
Switch(config)# ip access-list extended 100
Switch(config-ext-acl)#permit
ip Any Internet Protocol
tcp Transmission Control Protocol
udp User Datagram Protocol
icmp Internet Control Message Protocol
Switch(config-ext-acl)#permit ip
A.B.C.D Source address
any Any source host
host A single source host
Switch(config-ext-acl)#permit ip 192.168.10.1
A.B.C.D Source wildcard bits
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
A.B.C.D Destination address
any Any destination host
host A single destination host
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
192.168.10.100 0.0.0.1
[IFNAME] Egress interface name
Switch(config-ext-acl)#permit ip 192.168.10.1 0.0.0.1
192.168.10.100 0.0.0.1 gi26
Note: Follow the below rule to configure ip extended access list.
IP Rule: Permit/Deny Source_IP wildcard Dest_IP wildcard
Egress_Interface
TCP Rule: Permit/Deny tcp Source_IP wildcard Dest_IP wildcard
eq Given_Port_Number Egress_Interface
UDP Rule: Permit/Deny udp Source_IP wildcard Dest_IP wildcard
eq Given_Port_Number Egress_Interface
ICMP Rule: Permit/Deny icmp Source_IP wildcard Dest_IP
wildcard ICMP_Message_Type ICMP_Message_Code
Egress_Interface
Add MAC
Switch(config)# mac-address-table static 0012.7701.0101 vlan 1
interface fa1
mac-address-table unicast static set ok!
Port Security
Switch(config)# interface fa1
Switch(config-if)# switchport port-security
Disables new MAC addresses learning and aging activities!
Note: Rule: Add the static MAC, VLAN and Port binding first,
then enable the port security to stop new MAC learning.
Disable Port Security
Switch(config-if)# no switchport port-security
Summary of Contents for JetNet 6910G-M12 Series
Page 5: ...1 5 4 About Korenix 141...