Chapter 2
Cisco ME 3800X and ME 3600X Switch Cisco IOS Commands
deny (MAC access-list configuration)
To prevent non-IP traffic from being forwarded if the conditions are matched, use the deny command in
MAC access-list configuration mode. To remove a deny condition from the named MAC access list, use
the no form of this command.
Syntax Description
any
host src MAC-addr |
src-MAC-addr mask
host dst-MAC-addr |
dst-MAC-addr mask
type mask
aarp
amber
cos cos
dec-spanning
decnet-iv
diagnostic
dsm
etype-6000
etype-8042
lat
lavc-sca
OL-28238-01
deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr
mask} [type mask | aarp | amber | cos cos | dec-spanning | decnet-iv | diagnostic | dsm |
etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask |mop-console | mop-dump | msdos |
mumps | netbios | vines-echo | vines-ip | xns-idp]
no deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr |
dst-MAC-addr mask} [type mask | aarp | amber | cos cos | dec-spanning | decnet-iv |
diagnostic | dsm | etype-6000 | etype-8042 | lat | lavc-sca | lsap lsap mask | mop-console |
mop-dump | msdos | mumps | netbios | vines-echo | vines-ip | xns-idp]
Keyword to specify to deny any source or destination MAC address.
Defines a host MAC address and optional subnet mask. If the source
address for a packet matches the defined address, non-IP traffic from that
address is denied.
Defines a destination MAC address and optional subnet mask. If the
destination address for a packet matches the defined address, non-IP
traffic to that address is denied.
(Optional) Uses the Ethertype number of a packet with Ethernet II or
SNAP encapsulation to identify the protocol of the packet.
(Optional) Selects Ethertype AppleTalk Address Resolution Protocol that
maps a data-link address to a network address.
(Optional) Selects EtherType DEC-Amber.
(Optional) Selects a class of service (CoS) number from 0 to 7 to set
priority. Filtering on CoS can be performed only in hardware. A warning
message reminds the user if the cos option is configured.
(Optional) Selects EtherType Digital Equipment Corporation (DEC)
spanning tree.
(Optional) Selects EtherType DECnet Phase IV protocol.
(Optional) Selects EtherType DEC-Diagnostic.
(Optional) Selects EtherType DEC-DSM.
(Optional) Selects EtherType 0x6000.
(Optional) Selects EtherType 0x8042.
(Optional) Selects EtherType DEC-LAT.
(Optional) Selects EtherType DEC-LAVC-SCA.
The type is 0 to 65535, specified in hexadecimal.
•
The mask is a mask of don't care bits applied to the Ethertype before
•
testing for a match.
Cisco ME 3800X and ME 3600X Switch Command Reference
deny (MAC access-list configuration)
2-55