На x900 не получается ввести правило только с source MAC.
#show sys
Switch System Status Wed Jun 01 18:27:53 2011
Board ID Bay Board Name Rev Serial number
--------------------------------------------------------------------------------
Base 270 x900-24XT C-0 A1FY8600V
PSU 212 PSU1 AT-PWR01-AC F-1 86623377
Fan module 214 PSU2 AT-FAN01 F-1 85421439
--------------------------------------------------------------------------------
RAM: Total: 513008 kB Free: 402748 kB
Flash: 31.0MB Used: 21.6MB Available: 9.4MB
--------------------------------------------------------------------------------
Environment Status : Normal
Uptime : 6 days 23:08:00
Bootloader version : 1.0.9
Current software : r1-5.4.1-0.2.rel
Software version : 5.4.1-0.2
Build date : Fri Mar 11 16:14:39 NZDT 2011
Current boot config: flash:/esilnet.cfg (file exists)
User Configured Territory: europe
#conf t
#access list hard 0100-base
10 deny ip 172.16.0.0/16 10.8.0.0/8
Ctrl+C
#conf t
#access-list 4001 deny 0013.49a9.dc19
% Incomplete command.
#access-list 4001 deny 0013.49a9.dc19 0000.0000.0000 any
Ctrl+C
#conf t
#access-group 0100-base
#access-group 4001
% Insufficient space in the hardware packet classifier tables. Either the total number of rules has reached the limit or the number of bytes to match exceeds limit of 16 bytes.
% Failed to attach global ACL
При использовании hardware named access-list тоже самое, требует ввода source\dest адреса вместе.
Как в ACL использовать только source MAC, без dest MAC?