Connectivity Guide
Usage Information OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes increment. The
no version of this command removes the lter.
The count, byte, and log options are not supported on the S5148F-ON platform.
Example
OS10(config)# ipv6 access-list ipv6test
OS10(conf-ipv6-acl)# permit udp any any capture session 1
Supported Releases 10.2.0E or later
permit (MAC)
Congures a lter to allow packets with a specic MAC address.
Syntax
permit {nn:nn:nn:nn:nn:nn [00:00:00:00:00:00] | any} {nn:nn:nn:nn:nn:nn
[00:00:00:00:00:00] | any} [protocol-number | capture | cos | vlan]
Parameters
• nn:nn:nn:nn:nn:nn — Enter the MAC address.
• 00:00:00:00:00:00 — (Optional) Enter which bits in the MAC address must match. If you do not enter a
mask, a mask of
00:00:00:00:00:00 applies.
• any — (Optional) Set which routes are subject to the lter:
– protocol-number — Enter the MAC protocol number identied in the MAC header, from 600 to .
– capture — (Optional) Enter the capture packets the lter processes.
– cos — (Optional) Enter the CoS value, from 0 to 7.
– vlan — (Optional) Enter the VLAN number, from 1 to 4093.
Default Not congured
Command Mode MAC-ACL
Usage Information The no version of this command removes the lter.
Example
OS10(config)# mac access-list macacl
OS10(conf-mac-acl)# permit 00:00:00:00:11:11 00:00:11:11:11:11 any cos 7
OS10(conf-mac-acl)# permit 00:00:00:00:11:11 00:00:11:11:11:11 any vlan 2
Supported Releases 10.2.0E or later
permit icmp
Congures a lter to permit all or specic ICMP messages.
Syntax
permit icmp [A.B.C.D | A.B.C.D/x | any | host ip-address] [[A.B.C.D | A.B.C.D/x
| any | host ip-address] [capture | count | dscp value | fragment | log]
Parameters
• A.B.C.D — Enter the IPv4 address in dotted decimal format.
• A.B.C.D/x — Enter the number of bits that must match the dotted decimal address.
• any — (Optional) Enter the keyword any to specify any source or destination IP address.
• host ip-address — (Optional) Enter the IPv4 address to use a host address only.
• capture — (Optional) Capture packets the lter processes.
• count — (Optional) Count packets the lter processes.
916 Access Control Lists