
ACCESS-LIST 12 - 31
any <dest-MAC> <AA-BB-CC-DD-EE-FF>
[dot1p <0-7>|log|mark [8021p<0-7>|dscp<0-
63>[rule-precedence <1-5000> [rule-
description <WORD>]] rule-precedence <1-
5000> [rule-description <WORD>|type
[8021q|<1-65535>|aarp|appletalk|
arp|ip|ipv6|ipx|mint|rarp|wisp] [log|rule-
precedence]|vlan <1-4095> [log|rule-
precedence|type[8021q|
<1-65535>|aarp|appletalk|
arp|ip|ipv6|ipx|mint|rarp|wisp]
any – Specify any source host to match
• <dest-MAC> – Defines the destination MAC address
• <AA-BB-CC-DD-EE-FF> – Defines the destination MAC
address mask to match
• host – Defines exact destination MAC address to
match
• AA-BB-CC-DD-EE-FF – Defines the source MAC
address mask
• dot1p <0-7> [log|rule-precedence|type] – 802.1p
priority
• <0-7> – priority value
• log – Generates log messages when the packet
coming from the interface matches an ACL entry.
Log messages are generated only for router ACLs
• mark [8021p<0-7>|dscp<0-63>[rule-precedence
<1-5000>[rule-description <WORD>]] – Use with
mark command to mark a packet
• 8021p <0-7> – Modifies 802.1p VLAN user
priority. Select a VLAN user priority value
• dscp <0-63> – Sets the differentiated
services code-point value to <dscp-codepoint-
value> (0-63)
• <0-63> – Specify a DSCP codepoint value from
0-63
• rule-precedence <1-5000> rule-description
<WORD> – Defines an integer value between
1-5000. This value sets the rule precedence in
the ACL
• rule-description – Access-list entry description
• <WORD> – Specify the description not
exceeding 128 characters
• type[8021q|<1-65535>|aarp|apple-
talk|arp|ip|ipv6|ipx|mint|rarp|wisp][log<0-7>|
rule-precedence <1-5000>] – Ether Type
• 8021q – VLAN Ether Type (0x8100)
• <1-65535> – Ethernet Protocol number
• aarp – AARP Ether Type (0x80F3)
• appletalk – APPLETALK Ether Type (0x809B)
• arp – ARP Ether Type (0x0806)
• ip – IP Ether Type (0x0800)
• ipv6 – IPv6 Ether Type (0x86DD)
• ipx – IPX Ether Type (0x8137)
• mint – MINT Ether Type (0x8783)
• rarp – RARP Ether Type (0x8035)
• wisp –WISP Ether Type (0x8783)
• vlan <1-4095> [log|rule-precedence <1-5000>
rule-desription <WORD>|type – VLAN ID
• <1-4095> – Specify a VLAN ID between 1-4095
Comentarios a estos manuales