deny (MAC access-list configuration)
To prevent non-IP traffic from being forwarded if the conditions are matched, use the deny MAC access-list
configuration command on the switch stack or on a standalone switch. To remove a deny condition from the
named MAC access list, use the no form of this command.
deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
no deny {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][cos cos]
Syntax Description
Denies any source or destination MAC address.any
Defines a host MAC address and optional subnet mask. If the
source address for a packet matches the defined address,
non-IP traffic from that address is denied.
host src-MAC-addr | src-MAC-addr mask
Defines a destination MAC address and optional subnet mask.
If the destination address for a packet matches the defined
address, non-IP traffic to that address is denied.
host dst-MAC-addr | dst-MAC-addr mask
(Optional) Specifies the EtherType number of a packet with
Ethernet II or SNAP encapsulation to identify the protocol
of the packet.
The type is 0 to 65535, specified in hexadecimal.
The mask is a mask of don’t care bits applied to the EtherType
before testing for a match.
type mask
(Optional) Specifies EtherType AppleTalk Address
Resolution Protocol that maps a data-link address to a network
address.
aarp
(Optional) Specifies EtherType DEC-Amber.amber
(Optional) Specifies EtherType AppleTalk/EtherTalk.appletalk
(Optional) Specifies EtherType Digital Equipment
Corporation (DEC) spanning tree.
dec-spanning
(Optional) Specifies EtherType DECnet Phase IV protocol.decnet-iv
(Optional) Specifies EtherType DEC-Diagnostic.diagnostic
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
739
deny (MAC access-list configuration)