Dell PowerEdge FN I/O Module Command Line Reference Guide 9.10(0.0)

PDF

deny

To drop packets that match the filter criteria, configure a filter.

Syntax

deny {any | host mac-address | mac-source-address mac-source-address-mask } {any | host mac-address | mac-destination-address mac-destination-address-mask } [ ethertype-operator] [count [byte]]

To remove this filter, you have two choices:

Use the no seq sequence-number command if you know the filter’s sequence number.
Use the no deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} command.

Parameters

any	Enter the keyword `any` to drop all packets.
host mac-address	Enter the keyword `host` and then enter a MAC address to drop packets with that host address.
mac-source-address	Enter a MAC address in nn:nn:nn:nn:nn:nn format.
mac-source-address-mask	Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
mac-destination-address	Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-address-mask	Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator	(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: `ev2` - is the Ethernet II frame format `llc` - is the IEEE 802.3 frame format `snap` - is the IEEE 802.3 SNAP frame format
count	(OPTIONAL) Enter the keyword `count` to count packets processed by the filter.
byte	(OPTIONAL) Enter the keyword `byte` to count bytes processed by the filter.

Defaults

Not configured.

Command Modes

CONFIGURATION-MAC ACCESS LIST-EXTENDED

Supported Modes

Full–Switch

Command History

Version	Description
9.9(0.0)	Introduced on the FN IOM.
8.3.16.1	Introduced on the MXL 10/40GbE Switch IO Module.

Related Commands

permit — configures a MAC address filter to pass packets.

seq — configures a MAC address filter with a specified sequence number.