Brocade Communications Systems 53-1001761-01 manual Removing a MAC ACL

8 ACL configuration and management

Use a sequence number to specify the rule you wish to modify. Without a sequence number, a new rule is added to the end of the list, and the existing rule is unchanged.

NOTE

Using the permit and deny keywords, you can create many different rules. The examples in this section provide the basic knowledge needed to modify MAC ACLs.

NOTE

This example assumes that test_02 contains an existing rule number 100 with the “deny any any” options.

To modify a MAC ACL, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the mac command to specify the ACL called test_02 for modification.

switch(config)#mac access-list extended test_02

3. Enter the no seq command to delete the existing rule 100.

switch (config)#no seq 100

4. Enter the seq command to re create rule number 100 by recreating it with new parameters.

switch(conf-macl-ext)#seq 100 permit any any

Removing a MAC ACL

To remove a MAC ACL, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the mac command to specify and delete the ACL that you want to remove. In this example, the extended MAC ACL name is “test_02.”

Example of deleting the extended MAC ACL named “test_02.”

switch(config)#no mac access-list extended test_02

Reordering the sequence numbers in a MAC ACL

You can reorder the sequence numbers assigned to rules in a MAC ACL. Reordering the sequence numbers is useful when you need to insert rules into an ACL and there are not enough available sequence numbers.

The first rule receives the number specified by the starting-sequence number that you specify. Each subsequent rule receives a number larger than the preceding rule. The difference in numbers is determined by the increment number that you specify. The starting-sequence number and the increment number must be in the range of 1 through 65535.

For example, in the task listed below the resequence command assigns a sequence number of 50 to the rule named test_02, then the second rule has a sequence number of 55 and the third rule a has a sequence number of 60.

88	Converged Enhanced Ethernet Administrator’s Guide
	53-1001761-01