dot1p ip-value [mask]
no dot1p
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
This command configures an IEEE 802.1p value or range to be used as a MAC filter match criterion.
When a frame is missing the 802.1p bits, specifying an dot1p match criterion will fail for the frame and result in a non-match for the MAC filter entry.
The no form of this command removes the criterion from the match entry.
The MAC filter applied on the SAP egress can match the details of the packet-on-the-wire. For example, a QinQ packet came in on a null SAP and egressing on a dot1p-encapsulated port, the packet-on-the-wire will have three tags. Now, the etype=0x8100 and dot1p will equal the outer VLAN tag dot1p. This Etype and dot1p can be configured on the egress filter to match this packet.
no dot1p
Specifies the IEEE 802.1p value, in decimal notayion
Specifies a 3-bit mask.
This 3-bit mask can be specified using the following formats:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
D |
4 |
|
Hexadecimal |
0xH |
0x4 |
|
Binary |
0bBBB |
0b100 |
To select a range from 4 up to 7 specify p-value of 4 and a mask of 0b100 for value and mask.
dst-mac ieee-address [mask]
no dst-mac
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
Configures a destination MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the destination mac address as the match criterion.
no dst-mac
Specifies the MAC address to be used as a match criterion.
Specifies a 48-bit mask to match a range of MAC address values.
This 48-bit mask can be configured using the following formats:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
DDDDDDDDDDDDDD |
281474959933440 |
|
Hexadecimal |
0xHHHHHHHHHHHH |
0xFFFFFF000000 |
|
Binary |
0bBBBBBBB...B |
0b11110000...B |
To configure so that all packets with a source MAC OUI value of 00-03-FA are subject to a match condition, then the entry should be specified as: 0003FA000000 0xFFFFFF000000
etype ethernet-type
no etype
config>filter>mac-filter>entry>match
Supported on all 7210 SAS platforms as described in this document
This command configures an Ethernet type II Ethertype value for use as a MAC filter match criterion.
The Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet frame. For example, 0800 is used to identify the IPv4 packets.
The Ethernet type field is used by the Ethernet version-II frames. IEEE 802.3 Ethernet frames do not use the type field. Table: MAC match criteria exclusivity rules describes fields that are exclusive based on the frame format.
The data plane processes a maximum of two VLAN tags in a received packet. The Ethertype used in the MAC matching criteria for ACLs is the Ethertype that is found in the packet after processing single-tagged frames, double-tagged frames, and no-tag frames
The packet is considered to have no tags if at least one of the following criteria is true.
The packet is a null-tagged frame
The packet is a priority-tagged frame
The outermost Ethertype does not match the default Ethertype (0x8100)
The outermost Ethertype does not match the configured dot1q-etype on Dot1q encapsulated ports
The outermost Ethertype does not match the configured qinq-etype on QinQ encapsulated ports
The packet is considered to have a single tag if at least one of the following criteria is true.
The outermost Ethertype matches the default Ethertype (0x8100)
The outermost Ethertype matches the configured dot1q-etype on Dot1q encapsulated ports
The outermost Ethertype matches the configured qinq-etype on QinQ encapsulated ports
The packet is considered to have double tags if at least one of the following criteria is true.
The outermost Ethertype matches the default Ethernet type (0x8100)
The configured dot1q-etype on Dot1q encapsulated ports and the immediately following Ethertype match the default Ethertype (0x8100)
The configured qinq-etype on QinQ encapsulated ports and the immediately following Ethertype match the default Ethertype (0x8100)
The no form of this command removes the previously entered etype field as the match criteria.
no etype
Specifies the Ethernet type II frame Ethertype value to be used as a match criterion, expressed in hexadecimal.
src-mac ieee-address [ieee-address-mask]
no src-mac
config>filter>mac-filter>entry
Supported on all 7210 SAS platforms as described in this document
This command configures a source MAC address or range to be used as a MAC filter match criterion.
The no form of this command removes the source mac as the match criteria.
no src-mac
Specifies the 48-bit IEEE mac address to be used as a match criterion.
Specifies a 48-bit mask.
This 48-bit mask can be configured using the following formats:
|
Format style |
Format syntax |
Example |
|---|---|---|
|
Decimal |
DDDDDDDDDDDDDD |
281474959933440 |
|
Hexadecimal |
0xHHHHHHHHHHHH |
0xFFFFFF000000 |
|
Binary |
0bBBBBBBB...B |
0b11110000...B |
To configure so that all packets with a source MAC OUI value of 00-03-FA are subject to a match condition, the entry should be specified as: 003FA000000 0xFFFFFF000000