Brocade Communications Systems 53-1001761-01 manual Applying a MAC ACL to a CEE interface

ACL configuration and management 8

To reorder the rules in a MAC ACL, perform the following task from Privileged EXEC mode.

1.Enter the resequence command to assign sequence numbers to the rules contained in the

MAC ACL.

Example

switch#resequence access-list mac test_02 50 5

Applying a MAC ACL to a CEE interface

Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner that you need for this CEE interface. An ACL does not take effect until it is expressly applied to an interface using the access-groupcommand. Frames can be filtered as they enter an interface (ingress direction).

To apply a MAC ACL to a CEE interface, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the interface command to specify the CEE interface type and slot/port number.

Example of selecting the Ten Gigabit Ethernet port number 0/1.

switch(config)#interface tengigabitethernet 0/1

3.Enter the switchport command to configure the interface as a Layer 2 switch port.

4.Enter the mac-access-groupcommand to specify the MAC ACL that is to be applied to the Layer 2 CEE interface in the ingress direction.

Example

switch(conf-if-te-0/1)#mac access-group test_02 in

Applying a MAC ACL to a VLAN interface

Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner that you need for this VLAN interface. An ACL does not take effect until it is expressly applied to an interface using the access-groupcommand. Frames can be filtered as they enter an interface (ingress direction).

To apply a MAC ACL to a VLAN interface, perform the following steps from Privileged EXEC mode.

1.Enter the configure terminal command to access global configuration mode.

2.Enter the interface command to apply the VLAN interface to the MAC ACL.

Example

switch(config)#interface vlan 50

3.Enter the mac-access-groupcommand to specify the MAC ACL that is to be applied to the VLAN interface in the ingress direction.

Example

switch(conf-if-vl-82)# mac access-group test_02 in

Converged Enhanced Ethernet Administrator’s Guide	89
53-1001761-01