dot1p ip-value [mask]
no dot1p
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
This command configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.
When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.
The no form of this command removes the criterion from the match entry.
Egress Dot1p values used for matching will correspond to the Dot1p values used for remarking.
no dot1p
Specifies the IEEE 802.1p value in decimal.
Specifies a 3-bit mask that can be configured using the following formats:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
D |
4 |
|
Hexadecimal |
0xH |
0x4 |
|
Binary |
0bBBB |
0b100 |
To select a range from 4 up to 7 specify p-value of 4 and a mask of 0b100 for value and mask.
dst-mac ieee-address [mask]
no dst-mac
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
This command configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the destination mac address as the match criterion.
no dst-mac
Specifies the MAC address to be used as a match criterion.
Specifies a 48-bit mask to match a range of MAC address values.
This 48-bit mask can be configured using the following formats:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
DDDDDDDDDDDDDD |
281474959933440 |
|
Hexadecimal |
0xHHHHHHHHHHHH |
0xFFFFFF000000 |
|
Binary |
0bBBBBBBB...B |
0b11110000...B |
To configure so that all packets with a source MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 0003FA000000 0xFFFFFF000000
etype ethernet-type
no etype
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
This command configures an Ethernet type II Ethertype value for use as a MAC filter match criterion.
The Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet frame. For example, 0800 is used to identify the IPv4 packets.
The Ethernet type field is used by the Ethernet version-II frames. IEEE 802.3 Ethernet frames do not use the type field.
For the 7210 SAS-D, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C platforms, the dataplane processes a maximum of two VLAN tags in a received packet. The Ethertype used in the MAC matching criteria for ACLs is the Ethertype that is found in the packet after processing single-tagged frames, double-tagged frames, and no-tag frames
The packet is considered to have no tags if at least one of the following criteria is true:
the packet is a null-tagged frame
the packet is a priority-tagged frame
the outermost Ethertype does not match the default Ethertype (0x8100)
the outermost Ethertype does not match the configured dot1q-etype on Dot1q encapsulated ports
the outermost Ethertype does not match the configured qinq-etype on QinQ encapsulated ports
The packet is considered to have a single tag if at least one of the following criteria is true:
the outermost Ethertype matches the default Ethertype (0x8100)
the outermost Ethertype matches the configured dot1q-etype on Dot1q encapsulated ports
the outermost Ethertype matches the configured qinq-etype on QinQ encapsulated ports
The packet is considered to have double tags if at least one of the following criteria is true:
the outermost Ethertype matches the default Ethernet type (0x8100)
the configured dot1q-etype on Dot1q encapsulated ports and the immediately following Ethertype match the default Ethertype (0x8100)
the configured qinq-etype on QinQ encapsulated ports and the immediately following Ethertype match the default Ethertype (0x8100)
The no form of this command removes the previously entered etype field as the match criteria.
no etype
Specifies the Ethernet type II frame Ethertype value to be used as a match criterion, expressed in hexadecimal.
inner-dot1p value [vid-mask]
no inner-dot1p
config>filter>mac-filter>entry>match
7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C
This command configures the Dot1p value to be used to match against the Dot1p value in the inner tag (the one that follows the outermost tag in the packet) of the received packet.
The no form of this command removes the previously entered Dot1p value as the match criteria.
no inner-dot1p
Specifies the Dot1p value to match.
Specifies the mask value to match a range of Dot1p values. The value can be expressed in decimal or binary.
inner-tag value [vid-mask]
no inner-tag
config>filter>mac-filter>entry>match
7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C
This command configures the VLAN value to be used to match against the VLAN value in the inner tag (the one that follows the outermost tag in the packet) of the received packet.
The optional vid_mask is defaulted to 4095 (exact match) but may be specified to allow pattern matching. The masking operation is ((value & vid-mask) = = (tag & vid-mask)). A value of 6 and a mask of 7 would match all VIDs with the lower 3 bits set to 6.
The no form of this command removes the previously entered VLAN tag value as the match criteria.
no inner-tag
Specifies the VLAN value to use for the match
Specifies the mask value to match a range of VLAN values.
outer-tag value [vid-mask]
no outer-tag
config>filter>mac-filter>entry>match
7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C
The command configures the Dot1p value to be used to match against the Dot1p value in the outermost tag of the received packet.
The no form of this command removes the previously entered Dot1p value as the match criteria.
no outer-dot1p
Specifies the Dot1p value to match.
Specifies the mask value to match a range of Dot1p values. The value can be expressed in decimal or hexadecimal.
outer-tag value [vid-mask]
no outer-tag
config>filter>mac-filter>entry>match
7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C
This command configures the VLAN value to be used to match against the VLAN value in the inner tag (the one that follows the outermost tag in the packet) of the received packet.
The optional vid_mask is defaulted to 4095 (exact match) but may be specified to allow pattern matching. The masking operation is ((value & vid-mask) = = (tag & vid-mask)). A value of 6 and a mask of 7 would match all VIDs with the lower 3 bits set to 6.
The no form of this command removes the previously entered VLAN tag value as the match criteria.
no outer-tag
Specifies the VLAN value to use for the match
Specifies the mask value to match a range of VLAN values.
src-mac ieee-address [ieee-address-mask]
no src-mac
config>filter>mac-filter>entry
Supported on all 7210 SAS platforms as described in this document
This command configures a source MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the source mac as the match criteria.
no src-mac
Specifies the 48-bit IEEE mac address to be used as a match criterion.
Specifies a 48-bit mask that can be configured using:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
DDDDDDDDDDDDDD |
281474959933440 |
|
Hexadecimal |
0xHHHHHHHHHHHH |
0xFFFFFF000000 |
|
Binary |
0bBBBBBBB...B |
0b11110000...B |
To configure so that all packets with a source MAC OUI value of 00-03-FA are subject to a match condition then the entry should be specified as: 003FA000000 0xFFFFFF000000