permit (MAC access-list configuration)
To allow non-IP traffic to be forwarded if the conditions are matched, use the permit MAC access-list
configuration command on the switch stack or on a standalone switch. To remove a permit condition from
the extended MAC access list, use the no form of this command.
{permit {any | hostsrc-MAC-addr | src-MAC-addr mask} {any | hostdst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsaplsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
nopermit {any | host src-MAC-addr | src-MAC-addr mask} {any | host dst-MAC-addr | dst-MAC-addr mask}
[type mask | aarp | amber | appletalk | dec-spanning | decnet-iv | diagnostic | dsm | etype-6000 | etype-8042
| lat | lavc-sca | lsap lsap mask | mop-console | mop-dump | msdos | mumps | netbios | vines-echo | vines-ip
| xns-idp][coscos]
Syntax Description
Denies any source or destination MAC address.any
Specifies a host MAC address and optional subnet mask. If the
source address for a packet matches the defined address, non-IP
traffic from that address is denied.
host src-MAC-addr | src-MAC-addr
mask
Specifies a destination MAC address and optional subnet mask. If
the destination address for a packet matches the defined address,
non-IP traffic to that address is denied.
host dst-MAC-addr | dst-MAC-addr
mask
(Optional) Specifies the EtherType number of a packet with
Ethernet II or SNAP encapsulation to identify the protocol of the
packet.
•
type is 0 to 65535, specified in hexadecimal.
• mask is a mask of don’t care bits applied to the EtherType
before testing for a match.
type mask
(Optional) Specifies EtherType AppleTalk Address Resolution
Protocol that maps a data-link address to a network address.
aarp
(Optional) Specifies EtherType DEC-Amber.amber
(Optional) Specifies EtherType AppleTalk/EtherTalk.appletalk
(Optional) Specifies EtherType Digital Equipment Corporation
(DEC) spanning tree.
dec-spanning
(Optional) Specifies EtherType DECnet Phase IV protocol.decnet-iv
(Optional) Specifies EtherType DEC-Diagnostic.diagnostic
(Optional) Specifies EtherType DEC-DSM.dsm
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
789
permit (MAC access-list configuration)