Converged Enhanced Ethernet Command Reference 115
53-1001762-01
mac access-group 8
DRAFT: BROCADE CONFIDENTIAL
mac access-group
Applies rules specified in a MAC ACL to traffic entering an interface.
Synopsis mac access-group name in
no mac access-group name
Operands name Specifies the name of the standard or extended MAC access list.
in Specifies to filter inbound packets only.
Default There are no access lists applied to the interface.
Command
Modes
Interface configuration mode
Description Use this command to apply a MAC ACL to a Layer 2 or a VLAN interface. You create the MAC ACL by
using the mac access-list global configuration command. Use the no mac access-group command
to remove the MAC ACL from the interface.
Usage
Guidelines
You can assign one MAC ACL (standard or extended) to an interface.
When a packet is received on an interface with a MAC ACL applied, the switch checks the rules in
the ACL. If any of the rules match, the switch permits or drops the packet, according to the rule. If
the specified ACL does not exist, the switch permits all the packets.
Example To apply a MAC ACL named macacl2 on an interface:
switch(conf-if)#mac access-group macacl2 in
To remove a MAC ACL named macacl2 from an interface:
switch(conf-if)#no mac access-group macacl2
See Also mac access-list standard, mac access-list extended, show access-lists