OpenForum RSS: ��

�� (Vladimir)

Sun, 03 Apr 2016 21:52:07 GMT

� �� -�� :

mac access-list extended secure
deny host 0800.27a5.05c5 any
deny any host 0800.27a5.05c5
deny host 3c97.0e26.f302 any
deny any host 3c97.0e26.f302
...
permit any any
!
!
vlan access-map block_hosts 10
action drop
match mac address secure

vlan access-map block_hosts 20
action forward

�� , �� , �� deny �� 10-� �� 20-�.

�� (alexpn)

Thu, 10 Mar 2016 01:44:14 GMT

�� ?

access-list ?
<1-99> IP standard access list
<100-199> IP extended access list
<1100-1199> Extended 48-bit MAC address access list
<1300-1999> IP standard access list (expanded range)
<200-299> Protocol type-code access list
<2000-2699> IP extended access list (expanded range)
<700-799> 48-bit MAC address access list
dynamic-extended Extend the dynamic ACL absolute timer
rate-limit Simple rate-limit specific access list
��
<1100-1199> Extended 48-bit MAC address access list

access-list 1100 permit ?
H.H.H 48-bit hardware source address

show version
Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(55)SE9, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Mon 03-Mar-14 22:45 by prod_rel_team
Image text-base: 0x01000000, data-base: 0x02F00000

�� (Chuck Robbins)

Mon, 07 Mar 2016 15:50:53 GMT

> �� :
> !
> vlan access-map block_hosts 10
> action drop
> match mac address not-secure
> !
> vlan access-map block_hosts 20
> action forward
> match mac address secure
> !

�ӣ �� .

�� match address �� - �� . �� , �� , �� permit.

��-�� :
#sh access-lists
Extended IP access list allow
10 permit ip any any (409 matches)
Extended MAC access list not-secure
permit any any
Extended MAC access list secure
permit host 0800.27a5.05c5 any
permit any host 0800.27a5.05c5
permit host 3c97.0e26.f302 any
permit any host 3c97.0e26.f302
permit host b40c.258e.e401 any
permit any host b40c.258e.e401
permit host 001a.6d55.fc42 any
permit any host 001a.6d55.fc42

�� :

mac access-list extended not-secure
permit any any
mac access-list extended secure
permit host 0800.27a5.05c5

�� (eek)

Fri, 04 Mar 2016 16:06:28 GMT

�� :

!
vlan access-map block_hosts 10
action drop
match mac address not-secure
!
vlan access-map block_hosts 20
action forward
match mac address secure
!

�� (Chuck Robbins)

Fri, 04 Mar 2016 12:26:04 GMT

>[�� ]
>>>>>> !
>>>>>> vlan filter block_hosts vlan-list 505
>>>>> �� :(
>>>> � �� VACL?
>>> �� , �� "match mac address secure". ��
>>> � �� .
>> �� :
>> IP traffic is not access controlled by MAC VLAN maps
> �� "You can configure VLAN maps to match Layer 3 addresses for
> IPv4 traffic."

mac access-list extended not-secure
permit any any
mac access-list extended secure
permit host 0800.27a5.05c5 any
permit any host 0800.27a5.05c5
permit host 3c97.0e26.f302 any
permit any host 3c97.0e26.f302
permit host b40c.258e.e401 any
permit any host b40c.258e.e401
permit host 001a.6d55.fc42 any
permit any host 001a.6d55.fc42

ip access-list extended allow
permit ip any any
!
!

!
vlan access-map block_hosts 10
action forward
match mac address secure
match ip address allow
vlan access-map block_hosts 20
action drop
match mac a

�� (��)

Fri, 04 Mar 2016 11:47:46 GMT

>[�� ]
>>>>> action drop
>>>>> match mac address not-secure
>>>>> !
>>>>> vlan filter block_hosts vlan-list 505
>>>> �� :(
>>> � �� VACL?
>> �� , �� "match mac address secure". ��
>> � �� .
> �� :
> IP traffic is not access controlled by MAC VLAN maps

�� "You can configure VLAN maps to match Layer 3 addresses for IPv4 traffic."

�� (��)

Fri, 04 Mar 2016 11:45:45 GMT

>[�� ]
>>>> !--�� vacl, deny �� permit--
>>>> vlan access-map block_hosts 20
>>>> action drop
>>>> match mac address not-secure
>>>> !
>>>> vlan filter block_hosts vlan-list 505
>>> �� :(
>> � �� VACL?
> �� , �� "match mac address secure". ��
> � �� .

�� :
IP traffic is not access controlled by MAC VLAN maps

�� (Chuck Robbins)

Fri, 04 Mar 2016 11:40:43 GMT

>[�� ]
>>> match mac address secure
>>> !
>>> !--�� vacl, deny �� permit--
>>> vlan access-map block_hosts 20
>>> action drop
>>> match mac address not-secure
>>> !
>>> vlan filter block_hosts vlan-list 505
>> �� :(
> � �� VACL?

�� , �� "match mac address secure". �� .

�� (��)

Fri, 04 Mar 2016 11:28:27 GMT

>[�� ]
>> action forward
>> match mac address secure
>> !
>> !--�� vacl, deny �� permit--
>> vlan access-map block_hosts 20
>> action drop
>> match mac address not-secure
>> !
>> vlan filter block_hosts vlan-list 505
> �� :(

� �� VACL?

OpenForum RSS: ���������� ��� ������� �� �����

���������� ��� ������� �� ����� (Vladimir)

���������� ��� ������� �� ����� (alexpn)

���������� ��� ������� �� ����� (Chuck Robbins)

���������� ��� ������� �� ����� (eek)

���������� ��� ������� �� ����� (Chuck Robbins)

���������� ��� ������� �� ����� (�����)

���������� ��� ������� �� ����� (�����)

���������� ��� ������� �� ����� (Chuck Robbins)

���������� ��� ������� �� ����� (�����)

OpenForum RSS: ��

�� (Vladimir)

�� (alexpn)

�� (Chuck Robbins)

�� (eek)

�� (Chuck Robbins)

�� (��)

�� (��)

�� (Chuck Robbins)

�� (��)