Motorola Wing 5 Manual

ACCESS-LIST 12 - 17
• permit proto [||eigrp|gre|igmp|igp|ospf|vrrp] 
[|any|host ] [|any|host ] 
(log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
any Permits traffic to all destinations
host  Permits traffic to a specific host
  – Specify the host IP address.
log Logs all permit events
mark [8021p |dscp  Marks packets that match the ACL rule
 8021p  – Modifies 802.1p VLAN user priority from 0 - 7
 dscp  – Modifies DSCP TOS bits in the IP header from 0 - 63
rule-precedence  Sets the rule...

12 - 18 WiNG CLI Reference Guide
• permit [tcp|udp] [|any|host ] [eq |
range  ] [|any|host ] 
[eq [|bgp|dns|ftp|ftp-data|gopher|https|ldap|nntp|ntp|pop3|
smtp|ssh|telnet|tftp|www]|range  ] 
(log,mark [8021p |dscp ],rule-precedence ) 
{rule-description }
log Logs all permit events
mark [8021p |dscp  Marks packets that match the ACL rule
 8021p  – Modifies 802.1p VLAN user priority from 0 - 7
 dscp  – Modifies DSCP TOS bits in the IP header from 0 - 63
rule-precedence  Sets the rule precedence. Rules are...

ACCESS-LIST 12 - 19
eq [
|bgp|dns|ftp|ftp-data|gopher|
https|ldap|nntp|ntp|pop3|
smtp|ssh|telnet|tftp|www]Identifies a specific destination or protocol port
  – The destination port designated by its number
 bgp – The designated BGP protocol port
 dns – The designated DNS protocol port
 ftp – The designated FTP protocol port
 ftp-data – The designated FTP data port
 gropher – The designated GROPHER protocol port
 https – The designated HTTPS protocol port
 ldap – The designated LDAP protocol port
 nntp –...

12 - 20 WiNG CLI Reference Guide
Usage Guidelines
Use this command to permit traffic between networks/hosts based on the protocol type selected in the access list. The 
following protocols are supported:



 udp
 proto
The last ACE in the access list is an implicit deny statement. 
Whenever the interface receives the packet, its content is checked against all the ACEs in the ACL. It is allowed based on 
the ACL configuration.
 Filtering on TCP/UDP allows the user to specify port numbers as filtering...

ACCESS-LIST 12 - 21
12.2 mac-access-list
ACCESS-LIST
Table 12.2 summarizes MAC Access list commands
Table 12.2MAC Access List Commands
Command Description Reference
denyUse this command to specify packets to rejectpage 12-22
noNegates a command or sets its default valuepage 12-25
permitUse this command to specify packets to acceptpage 12-28
clrscrClears the display screenpage 5-3
commitCommits (saves) changes made in the current sessionpage 5-4
doRuns commands from EXEC modepage 4-66
endEnds and exits...

12 - 22 WiNG CLI Reference Guide
12.2.1 deny
mac-access-list
Specifies packets to reject
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
deny [|any|host
deny [ |any|host ] 
[ |any|host ] 
(dot1p ,type [8021q||aarp|appletalk|arp|ip|ipv6|mint|rarp|
wisp|ipx],vlan ) [log mark [8021p |dscp ]|
mark [8021p |dscp ]|rule-precedence ] 
{rule-description }
Parameters
• deny [ |any|host ] 
[ |any|host ] 
(dot1p ,type...

ACCESS-LIST 12 - 23
any Identifies all devices as the destination to deny access
host  Identifies a specific host as the destination deny access
  – Specify the MAC address of the host.
dotp1p  Configures the 802.1p priority value. Sets the service classes for traffic handling
  – Specify a value from 0 - 7.
type [8021q|

12 - 24 WiNG CLI Reference Guide
Usage Guidelines
The deny command disallows traffic based on layer 2 (data-link layer) data. The MAC access list denies traffic from a 
particular source MAC address or any MAC address. It can also disallow traffic from a list of MAC addresses based on the 
source mask.
The MAC access list can disallow traffic based on the VLAN and EtherType.



 802.1q
The last ACE in the access list is an implicit deny statement. Whenever the interface receives the packet, its content...

ACCESS-LIST 12 - 25
12.2.2 no
mac-access-list
Negates a command or sets its default
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
no [deny|permit]
no [deny|permit] [ |any|host ] 
[ |any|host ] 
(dot1p ,type [8021q||aarp|appletalk|arp|ip|ipv6|mint|rarp|
wisp|ipx],vlan ) [log mark [8021p |dscp ]|
mark [8021p |dscp ]|rule-precedence ] 
{rule-description }
Parameters
• no [deny|permit] [ |any|host ] 
[ |any|host ]...

12 - 26 WiNG CLI Reference Guide
dotp1p  Configures the 802.1p priority value. Sets the service classes for traffic handling
  – Specify a value from 0 - 7.
type [8021q|